Add pre-deployment health checks on the role assignment before starting deployment

I've encountered the issue that during azd deploy, the Container App revision creation timed out with "Operation expired" — a known RBAC propagation delay issue where managed identity ACR pull permissions take 60–120s to fully propagate. It would be nice for azd to check the role assignment was ready before proceed with container app deployment.