Deploy-Diag-LogsCat: Does not have diag setting for Azure firewall

No assignments for alz have diag setting for azure firewall, would think this was kind of essential for a complete alz setup.

Running the latest version of [alz-terraform-accelerator](https://github.com/Azure/alz-terraform-accelerator/tree/main) for platform landing zone, and the diag policy assignment in use here does not include azure firewall.

Start by reviewing the diagnostic policy assignment used by alz-terraform-accelerator and compare its coverage with Azure Firewall requirements. Confirm which ALZ assignment is missing the setting and validate that the completed assignment enables the expected firewall diagnostic logs for a platform landing zone.

Written by the indexing model from the issue text.