protect aks with a firewall deployed automatically in bicep

[ra-at-diladele-com]

[ra-at-diladele-com]

See https://learn.microsoft.com/en-us/azure/firewall/protect-azure-kubernetes-service