When auto creating app registrations, create a user group for each role and assign to the app role

[marrobi]

Description

As a TRE Administrator
I want a group assigning to each application role
So that workspace owners can use AAD group management to manage who is in the groups.

Acceptance criteria

• Option to create groups when deploying a workspace
• Group created for each app role
• Workspace owner assigned as group owner
• Group name includes role, workspace name, and short ID in some form (120 char limit, maybe use description for too)