Small changes to deploy to allow for az cli login deployment

[lossyrob]

Changes to the deployment scripts and environment to better enable a workflow that uses the az cli identity for deploying:

• Don't az login if already logged in
• Use azcli kubeconvert if no SP is defined
• Don't require client id/secret in environment

Also, avoid terraform from manipulating manual security rules on the NSG