Fix(security): Set default network access rule for Storage Accounts to deny

[orca-security-staging]

This change sets the default network access rule for the Azure Storage Account to deny, ensuring that access is only granted to specific networks. This enhances security by restricting access to the storage account to only allowed networks. The changes include:

1. Added the network_rules block to the azurerm_storage_account resource.
2. Configured the default_action to Deny.
3. Added a placeholder for ip_rules and virtual_network_subnet_ids which need to be filled in with actual values before merging.

---

🤖 DISCLAIMER: This fix was automatically generated using Orca Security's AI. While the suggested code addresses the issue, please review it carefully, make any necessary adjustments, and verify that it aligns with your infrastructure's best practices before merging.

Related Orca Alert: orca-11848

[orca-security-staging]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   0   0	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca