An Azure policy is blocking this deployment

MSFT requires a tag on some subscriptions but the error message isn't clear enough to know what to do:

The workaround is to modify the bicep and add this tag so that the resources get provisioned with it, but for folks new to AZD / Bicep, it's not obvious where or how to do this.

Recommend improving this error message to explain where to set tags and exactly what to set.