feat(networksecurity): Add samples for intercept firewall rule creation

[duvni]

Description

Adding samples for Security Profile, Security Profile Group and Global Firewall Policy, to showcase how an "apply_security_profile_group" rule is added.

CI tests are skipped since there are permission issues with org/folder level resources.
Local testing was performed successfully.

Checklist

Readiness

• Yes, merge this PR after it is approved
• No, don't merge this PR after it is approved

Style

• My sample follows the rules described for Terraform in the Effective Samples style guide
• My sample follows the other requirements and best practices in the Contributing
  guide

Testing

• I have performed tests described in the Contributing guide:

  • Tests pass: terraform apply
  • Lint pass: terraform fmt check

Intended location

• Yes, this sample will be (or already is) included on cloud.google.com
  Location(s):

• No, this sample won't be included on cloud.google.com
  Reason:

API enablement

• If the sample needs an API enabled to pass testing, I have added the service to the Test setup file

Review

• If this sample adds a new directory, I have added codeowners to the CODEOWNERS file

[snippet-bot]

Here is the summary of changes.

You are about to add 6 region tags.

• network_security/intercept/basic/consumer/main.tf:51, tag networksecurity_intercept_create_consumer_subnetwork_tf
• network_security/intercept/basic/consumer/main.tf:89, tag networksecurity_intercept_create_security_profile_tf
• network_security/intercept/basic/consumer/main.tf:103, tag networksecurity_intercept_create_security_profile_group_tf
• network_security/intercept/basic/consumer/main.tf:113, tag networksecurity_intercept_create_firewall_policy_tf
• network_security/intercept/basic/consumer/main.tf:120, tag networksecurity_intercept_create_firewall_policy_rule_tf
• network_security/intercept/basic/consumer/main.tf:139, tag networksecurity_intercept_create_firewall_policy_association_tf

---

This comment is generated by snippet-bot.
If you find problems with this result, please file an issue at:
https://github.com/googleapis/repo-automation-bots/issues.
To update this comment, add snippet-bot:force-run label or use the checkbox below:

• Refresh this comment

[glasnt]

There's a mismatch here between this sample working if you run it as a user with org/folder level permissions to make these changes, and the CI system having the same permissions.

I don't think this is a level of access we want to grant CI. We can still accept this sample as is, but with an added test.yaml file to skip the terraform apply step (the terraform will still be validated by CI)