Make a guide on how meet ScubaGear checks

[buidav]

💡 Summary

Often. we've had questions about why certain checks were failing when a user runs ScubaGear.
There have been times where this is not the fault of the runner.

• As certain checks require a config file to meet the policy checks,
• They're using a 3rd party service to meet the policy that ScubaGear can't assess.
• They have a use case that requires the tenant's configuration to fail ScubaGear's checks.

Motivation and context

Documentation is written so that a person that is new to M365, CISA SCuBA, and ScubaGear can learn how
how to configure ScubaGear to meet all policy checks.

Implementation notes

Include a section in the README documentation titled something like "How to meet ScubaGear checks".
The documentation should link to other sections of our documentation rather than reiterating features such as the config file features.

Acceptance criteria

• Detailed documentation linked from the README that details how to meet ScubaGear's policy checks.