Use Azure Verified Modules where available

- [ ] Storage Accounts
- [ ] Availability Set
- [ ] Disk
- [ ] Disk Encryption Set
- [ ] Virtual Machine
- [ ] Data Factory
- [ ] AVD: Application Group, Host Pool, Workspace
- [ ] Event Grid System Topic
- [ ] Key Vault
- [ ] Logic App
- [ ] User Assigned Managed Identity
- [ ] Bastion
- [ ] Firewall Policy
- [ ] Network Interface (from SvenAelterman/Bicep-VNetModule)
- [ ] Network Security Group (from SvenAelterman/Bicep-VNetModule)
- [ ] Private DNS Zone
- [ ] Private Endpoint
- [ ] Route Table (from SvenAelterman/Bicep-VNetModule)
- [ ] Virtual Network (from SvenAelterman/Bicep-VNetModule)
- [ ] Log Analytics Workspace
- [ ] Deployment Script
- [ ] ~~Resource Group~~
- [x] Azure Compute Gallery
- [x] Azure Image Builder Template

(All pending compatibility with the requirements of this project.)

### Benefits

Leverage common patterns, e.g., for Diagnostic Settings.

Start with the checklist in issue #26 and determine which listed resources have Azure Verified Modules compatible with this project’s requirements. Done means replacing applicable implementations while preserving those requirements, including common patterns such as Diagnostic Settings; the issue does not name files or tests to run.

Written by the indexing model from the issue text.