Merge SHM and context resource deployment

[jemrobinson]

✅ Checklist

• You have given your pull request a meaningful title (e.g. Enable foobar integration rather than 515 foobar).
• You are targeting the appropriate branch. If you're not certain which one this is, it should be develop.
• Your branch is up-to-date with the target branch (it probably was when you started, but it may have changed since then).

🚦 Depends on

n/a

⤴️ Summary

This PR moves SHM deployment out of Pulumi and into AzureSDK commands. It also refactors the CLI interface so only the following commands are needed to deploy and SHM and SREs

$ dsh context add --admin-group-name $GROUP_NAME --description $HUMAN_FRIENDLY_NAME --name $SAFE_NAME --subscription $SUBSCRIPTION_NAME
$ dsh shm deploy --entra-tenant-id $TENANT_ID  --fqdn $FQDN  --location $LOCATION
$ dsh config template --file $YAML_FILE_PATH
$ dsh config upload $YAML_FILE_PATH
$ dsh sre deploy $SRE_NAME

It moves some config values between Context and SHMConfig so that fewer things depend on the (local-only) Context and more things use the (shared) SHMConfig. The things remaining in Context are all human-readable (no GUIDs)

Config examples

$ dsh context show
Current context: contoso
        Admin group name: Safe Haven Test Admins
        Description: DSG 2024 - Contoso
        Name: contoso
        Subscription name: Data Safe Haven Development

$ dsh config show-shm
azure:
  location: uksouth
  subscription_id: <removed GUID>
  tenant_id: <removed GUID>
shm:
  admin_group_id: <removed GUID>
  entra_tenant_id: <removed GUID>
  fqdn: green.develop.turingsafehaven.ac.uk

$ dsh config show apple
azure:
  location: uksouth
  subscription_id: <removed GUID>
  tenant_id: <removed GUID>
description: Apple Project
name: apple
sre:
  admin_email_address: safehavendevs@turing.ac.uk
  admin_ip_addresses:
  - <removed IP address>
  - <removed IP address>
  - <removed IP address>
  - <removed IP address>
  data_provider_ip_addresses:
  - <removed IP address>
  - <removed IP address>
  - <removed IP address>
  databases:
  - postgresql
  remote_desktop:
    allow_copy: true
    allow_paste: true
  research_user_ip_addresses:
  - <removed IP address>
  - <removed IP address>
  - <removed IP address>
  software_packages: pre-approved
  timezone: Europe/London
  workspace_skus:
  - Standard_D4s_v5

🌂 Related issues

Closes #1850
Closes #1896
Closes #1898
Closes #1900
Closes #1962
Closes #1965

🔬 Tests

Tested locally

[JimMadge]

Looks good.

I have some questions, and there are a few pieces I'm not very keen on.

I think there is scope to improve the coverage in data_safe_haven/commands/ and data_safe_haven/config/.

[JimMadge]

@craddm Would appreciate your thoughts on the conversations here.

[jemrobinson]

@JimMadge : Anything else you want to see here?