Add single asset-level azure queries

[preslavgerchev]

Adds a new query for each azure new resource-as-asset we now support in cnquery and cnspec.
There's a lot of copy/pasta here. I've added a -single suffix to each query to indicate it's meant to be used only with a specific asset since the queries differ, e.g.

old query that checks vms disks:

azure.compute.vms {....}

new query that checks a specific vm's disks:

azure.subscription.compute.vm{....}

^ note it's singular versus plural

Here's an example new group of queries that will be run on each sql server:

  - asset_filter:
      query: |
        platform.name == "azure-sql-server"
        platform.kind == "azure-object"
    scoring_queries:
      mondoo-azure-security-no-sql-databases-allow-ingress-0-0-0-0-0-single: null
      mondoo-azure-security-ensure-auditing-on-single: null
      mondoo-azure-security-ensure-auditing-retention-greater-than-90-days-single: null

Running a full discovery and scan with this policy gives results like:

[HRouhani]

As discussed with Preslav, we decided not to merge it for the moment!

[tas50]

Is this still a PR we want to take on?