Fix az CLI query in ISA-95 pipeline (#7479)

There's an Azure CLI command in the setup for the ISA-95 smoke test pipeline which gets the NSG for a given NIC. It needs this information so it can add a rule to the NSG to block outbound traffic during the smoke test. The JMESPath query in the Azure CLI command was wrong; it is supposed to find any NSGs associated with the NIC via network interface _or_ subnet, but it was only finding the former. This update fixes the query to find both.

I also replaced some hard-coded proxy URLs with pipeline variables. In the future we can replace those with Azure CLI commands that get the IP address for each proxy server given their VM name (which is currently still hard-coded into the tests), but this incremental improvement is a reasonable first step.

I ran the smoke test in a previously failing environment that has a subnet association instead of network interface, and it passed.

## Azure IoT Edge PR checklist:

Author: damonbarry

builds/e2e/isa-95-smoke-test.yaml

@@ -20,10 +20,8 @@ schedules:
 variables:
   Codeql.Enabled: false
   DisableDockerDetector: true
-  itProxy: http://10.16.8.4:3128
-  otProxy: http://10.16.5.4:3128
   resourceGroup: nested-edge-isa95
-  otProxyName: "otproxy"
+  otProxyName: iotedge-isa95-otproxy
 
 resources:
   pipelines:
@@ -71,7 +69,7 @@ stages:
       deploymentFile: nestededge_topLayerBaseDeployment_amqp.json
       parentName: ''
       parentDeviceId: ''
-      proxyAddress: $(itProxy)
+      proxyAddress: $(proxyUrl.it)
     pool:
       name: $(pool.name)
       demands:
@@ -154,7 +152,7 @@ stages:
       level: 3
       upstreamProtocol: amqp
       deploymentFile: nestededge_isa95_smoke_test_BaseDeployment.json
-      proxyAddress: $(otProxy)
+      proxyAddress: $(proxyUrl.ot)
       x64ParentName: $[ dependencies.SetupVM_level4.outputs['x64.deployIoTEdge.deviceName'] ]
       x64ParentDeviceId: $[ dependencies.SetupVM_level4.outputs['x64.createIdentity.parentDeviceId'] ]
       arm64ParentName: $[ dependencies.SetupVM_level4.outputs['arm64.deployIoTEdge.deviceName'] ]
@@ -222,7 +220,7 @@ stages:
       identityArtifactName: aziot-identity-ubuntu24.04-amd64
       artifactName: iotedged-ubuntu24.04-amd64
       nestededge: true
-      proxyAddress: $(otProxy)
+      proxyAddress: $(proxyUrl.ot)
       test_type: nestededge_isa95
       verbose: false
     strategy:

builds/e2e/templates/nested-isa95-lock.yaml

@@ -31,7 +31,8 @@ steps:
             --resource-group '$(resourceGroup)' \
             --name "$network_interface" \
             --output tsv \
-            --query 'value[?contains(keys(association), `networkInterface` || `subnet`)].networkSecurityGroup | [0].id'
+            --query 'value[?contains(keys(association), `networkInterface`) ||
+                     contains(keys(association), `subnet`)].networkSecurityGroup | [0].id'
         )
         echo "$nsg_resource"
         nsgName=$(echo "$nsg_resource" | sed -n 's/.*\/\(.*\)/\1/p')