Microsoft.DesktopVirtualization/hostPools/sessionHostConfigurations@2024-08-08-preview should be an allowed trusted microsoft service for keyvault

**Bicep version**
Bicep CLI version 0.31.92 (b06509316a)

**Describe the bug**
when deploying the new session host configuration the AVD service principal needs to have access to a keyvault. if we only allow access from specific virtual netowkrs and IP's and we enable "Allow trusted Microsoft services to bypass this firewall" it is not possible to deploy the sessionHostConfiguration. We get a error that a public Microsoft IP is not allowed to the keyvault.

Start by reproducing the deployment described for sessionHostConfigurations@2024-08-08-preview with Key Vault firewall restrictions and trusted Microsoft services enabled. Then inspect the repository's type definitions for this resource and compare how trusted Microsoft service access is represented for related resources. Done means the session host configuration is accepted in that deployment scenario and the relevant validation is covered.

Written by the indexing model from the issue text.