Can't disable WAF Policy managed rules without knowing group rules

**Is your feature request related to a problem? Please describe.**
When using the `az network application-gateway waf-policy managed-rule rule-set update` command, it requires the use of `--group-name`, even if we only want to disable a single rule, or even multiple rules in multiple rule groups.
This makes scripting a huge issue to maintain, because every script needs to basically have a full table of all the group names, and match the rule ID with group name, if you want any kind of scalability/reusability to the script you're build, especially since there's no way to pull down a list of all rules with their status and matching group name! `az network application-gateway waf-policy managed-rule rule-set list` only returns the rules that are disabled (with their match group name).

**Describe the solution you'd like**
1. Not have `--group-name` be a mandatory parameter. It should instead be and either/or situation, meaning: Either `--group-name` or `--rules`, but not both.
2. Make `--group-name` support a space-separated list of strings, and if used, it disables all rules in the provided groups
3. Make `--rules` support a space-separated list of rules, and if used, it disables the specific rules. No need to provide the matching group-names.

**Describe alternatives you've considered**
Have another CLI command that can match a given rule ID with it's group name. Not as ideal, but could be easier to do, considering the rule groups only change when there's a new version of OWASP, which is very rare let's be honest (Every 2-ish years).