feat: add ability to override `varManagementGroupIds` values in `alzDefaultPolicyAssignments.bicep` & `workloadSpecificPolicyAssignments.bicep` to support rename of ALZ default MGs and fix #986 #836