Disallow public traffic to storage accounts

[lossyrob]

Description

This PR sets the storage account in the test deployment to disallow traffic that is not in the node subnet of the vnet.
This PR adds logic to the deploy script to enable access to the terraform state SA that is denies public internet traffic.

TODO:

• Update to allow function app access to the SA after Upgrade to linux function app and use identity based storage connection for function app #226 is merged.

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

How Has This Been Tested?

Checklist:

Please delete options that are not relevant.

• I have performed a self-review
• Changelog has been updated
• Documentation has been updated
• Unit tests pass locally (./scripts/test)
• Code is linted and styled (./scripts/format)