Diagnostic logs in Batch accounts should be enabled

# Rule request

## Suggested rule change

Diagnostic logs in Batch accounts should be enabled.

Enable logs and retain them for up to a year. This enables you to recreate activity trails for investigation purposes when a security incident occurs or your network is compromised.

This is actually an official Defender for Cloud recommendation.

Security pillar for this one.

## Applies to the following

The rule applies to the following:

- Resource type: **[Microsoft.Batch/batchAccounts]**

## Additional context

[Diagnostic logs in Batch accounts should be enabled](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2fproviders%2fMicrosoft.Authorization%2fpolicyDefinitions%2f428256e6-1fac-4f48-a757-df34c2b3336d)
[Template reference](https://learn.microsoft.com/en-us/azure/templates/microsoft.batch/batchaccounts)