Update Policies For V1.2.0 Release From Upstream

[jtracey93]

This issue will track the updates to the policy definitions that have changed recently upstream:

• Deny-Subnet-Without-Udr & Deny-Subnet-Without-Nsg were updated in Update deny subnet without NSG & UDR policy Enterprise-Scale#885
• Deploy-ASCDF-Config was updated in Update Microsoft Defender for Cloud plan for Containers Enterprise-Scale#876

[krowlandson]

Unfortunately, the updates applied upstream result in the following error when performing an upgrade from the latest release to

• Update Library Templates (automated) #281

╷
│ Error: updating Policy Set Definition "Deploy-ASCDF-Config": policy.SetDefinitionsClient#CreateOrUpdateAtManagementGroup: Failure responding to request: StatusCode=400 -- Original Error: autorest/azure: Service returned an error. Status=400 Code="InvalidPolicySetParameterUpdate" Message="The existing policy has '15' parameter(s) which is greater than the count of parameter(s) '14' in the policy being added. Policy parameters cannot be removed during policy update."
│
│   with module.test_root_id_1.azurerm_policy_set_definition.enterprise_scale["/providers/Microsoft.Management/managementGroups/root-1/providers/Microsoft.Authorization/policySetDefinitions/Deploy-ASCDF-Config"],
│   on ..\..\resources.policy_set_definitions.tf line 1, in resource "azurerm_policy_set_definition" "enterprise_scale":
│    1: resource "azurerm_policy_set_definition" "enterprise_scale" {
│
╵

Need to consider best approach to minimise customer impact.