Add KV logs and re-adjust log analytics workspace retention/remove locks

[jayhaddad]

Description

1. Added key vault diagnostic logging
2. Changed log analytics workspace retention to 90 days only if Sentinel is deployed. A sentinel-linked workspace includes 90 days of retention.
3. Removed from bicep module the ability to configure locks on log analytics workspace. This is not a recommended practice from Microsoft, as it can interfere with some housekeeping operations.

Issue reference

The issue this PR will close: #937 #936 #940

Checklist

Please make sure you've completed the relevant tasks for this PR out of the following list:

• All acceptance criteria in the backlog item are met
• The documentation is updated to cover any new or changed features
• Manual tests have passed
• Relevant issues are linked to this PR