make hub network optional

[mosabami]

This PR is based on experience working with a customer. Customer wanted to create a POC environment but we had significant difficulty tuning this template to work for such a simple scenario. Here are the changes customers wanted to do that our template didnt enable:

1. Not require a hub network
2. Not use firewall
3. Deploy successfully without providing hub resource id (we ran into issues with private network link)
4. deploy template with at least 1 dedicated workload profile

Based on these requirements, this PR makes the following changes 

1. Make it optional to deploy hub network
2. Make it so that bastion can be deployed in spoke network but only if hub network is not deployed
3. Only create egress lockdown (UDR) if a firewall is deployed
4. Eliminate errors that occur when invalid hub resource ID is provided
5. Add an option to enable non consumption workload profile
6. Expose these new options to the deploy to Azure button method of deployment