Create or use bootstrap code to create action group and activity log alerts required for compliance

[SvenAelterman]

Consider creating custom policy definitions and a policy initiative.

Easier is to create alert rules but because those are at the subscription level, they could be removed by subscription owners after subscription vending without an easy remediation (though of course the subscription would become non-compliant with the compliance policy).

[SvenAelterman]

The bootstrap code to create the Activity Log alerts with Bicep (but not with policy) is available here: https://github.com/SvenAelterman/AzHITRUSTHIPAAActivityLogAlerts