Create mechanism to review Airlock requests

[guybartal]

Airlock manager need to be able access the files which are being asked for import,
Airlock Import in progress storage account is deployed in core services subnet and there's no access from the workspace services subnet.

• Template for Review Workspace #2498
• User resource template for Import Review VM #2601
• Add ability to restrict resource templates to specific roles #2600
• UI: Users only see templates that they are authorized to use #2640
• Airlock Manager can create user resources #2499 (depends on Add ability to restrict resource templates to specific roles #2600)
• Airlock Manager should have permission to get SAS token #2502
• User resource template for Export Review VM #2602
• Clean up VMs used to review Airlock requests  #2507
• Automatically download data onto review VM #2513
• Check Airlock Review logic in e2e tests #2734
• Create Review VM from the Airlock UI screen #2735
• Document mechanism for reviewing Airlock requests #2665
• Clean up any review VMs if the request is cancelled #2829

[tanya-borisova]

Refine this work after the discussion for Review Workspaces.
We want to discuss separately with @marrobi what we provide to OSS.