[RULE] Check that additional fleet locations are within allow regions

### Existing rule

_No response_

### Suggested rule

Any configured additional locations of fleet resources should be within allowed locations if configured.

### Pillar

Security

### Additional context

This is similar to the existing rule `Azure.EntraDS.ReplicaLocation`.

References:

- https://learn.microsoft.com/en-us/azure/azure-compute-fleet/quickstart-create-rest-api?tabs=powershell-1
- https://learn.microsoft.com/en-us/azure/templates/microsoft.azurefleet/fleets