Update bicep-security-scan.yaml

[pamelafox]

Purpose

Fixes a Bicep regression

Does this introduce a breaking change?

When developers merge from main and run the server, azd up, or azd deploy, will this produce an error? If you're not sure, try it out on an old environment.

[ ] Yes
[X] No

Type of change

[X] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

Code quality checklist

See CONTRIBUTING.md for more details.

• [ ] The current tests all pass (python -m pytest).
• [ ] I added tests that prove my fix is effective or that my feature works
• [ ] I ran python -m pytest --cov to verify 100% coverage of added lines
• [ ] I ran python -m mypy to check for type errors
• [ ] I either used the pre-commit hooks or ran ruff manually on my code.