Posture check: Azure Container Registry does not use a dedicated resource group
Query: ```config from cloud.resource where cloud.type='azure' and api.name= 'azure-container-registry'   as X; config from cloud.resource where api.name = 'azure-resource-group' as Y; filter ' $.X.resourceGroupName equals $.Y.name and $.Y.isDedicatedContainerRegistryGroup is false' ; show X;```