Unchangable Pulumi workspace configuration

[JimMadge]

:white_check_mark: Checklist

• [x] You have given your pull request a meaningful title (e.g. Enable foobar integration rather than 515 foobar).
• [x] You are targeting the appropriate branch. If you're not certain which one this is, it should be develop.
• [x] Your branch is up-to-date with the target branch (it probably was when you started, but it may have changed since then).

:vertical_traffic_light: Depends on

2241

:arrow_heading_up: Summary

Protects against changing values which we have declared shouldn't be updated in the Pulumi workspace.

:closed_umbrella: Related issues

closes #2199

:microscope: Tests

❯ hatch run dsh sre deploy hojo
You are logged into the Azure CLI as:
        user: Jim Madge (…)
        tenant: turing.ac.uk (…)
Are these details correct? [y/n] (y): y
You are logged into the Microsoft Graph API as:
        user: aad.admin.jim.madge@green.develop.turingsafehaven.ac.uk
(…)
        tenant: green.develop.turingsafehaven.ac.uk (…)
Are these details correct? [y/n] (y): y
SRE will be deployed to subscription 'Data Safe Haven Development 2'
('…')
SRE will be registered in SHM 'daimyo.develop.turingsafehaven.ac.uk'
SHM subscription '…'
Loaded stack shm-daimyo-sre-hojo.
Unchangeable configuration variable 'azure-native:subscriptionId' not consistent, your configuration: '…', Pulumi workspace: '…'.
Applying Pulumi configuration options failed..
Pulumi deployment failed.
Could not deploy Secure Research Environment 'hojo'.

[github-actions[bot]]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
data_safe_haven/infrastructure
project_manager.py
Project Total

This report was generated by python-coverage-comment-action