Create foreign resource groups if they don't exist

[mbakunas]

When setting the scope to subscription, we can't deploy to a foreign subscription. May investigate tenant scope, but I'm not optimistic that this will work. Setting to future version.