ACR Networking - Add ACR Firewall Rule Support for Service Tags

[johnsonshi]

ACR's firewall rule capability should support adding service tags, not just IP addresses and CIDR ranges. This will allow registry admins to allow incoming traffic from an IP range that is part of a service tag (e.g., a known network or traffic from another Azure service) without needing to enumerate IPs.