Policy for setting + audit diagnostics based on specified tagging

[spaelling]

Only applies policy if resource is tagged in specified way. Also made an audit policy to see the initial compliance level.

Deployment is done at the management group level.