API should generate Airlock SAS with User Delegated Key

[tamirkamara]

Description

As a TRE Developer
I want to generate airlock sas tokens for users with User Delegated Key
So that I won't use account keys and operation will be more secure

** See how the Airlock processor does this
** This will require the API identity to have blob read and write permission on the relevant storage accounts since Auth is intersection of the sas embedded permission and those on the user delegated key that created it. On first glance it might not look as a security improvement but it is - not using the static account key is the improvement as having it gave the holder (api) full access to the entire storage account.

Acceptance criteria

• API doesn't use account keys
• API doesn't have Read Data Access permission on core or the workspace
• SAS is generated and working