Bug: Creation of storage account fails permanently if KeyVault inaccessible

[theunrepentantgeek]

Describe the bug

As described in #4459

When attempting to create a storage account with customer managed key encryption, if the user-assigned managed identity of the storage account does not have RBAC to the Key Vault, the operator/Azure correctly errors out for that resource saying that there is a key vault authentication failure.

Expected behavior

This shouldn't be a permanent error - ASO should continue reconciling the storage account, with that reconciliation succeeding after the RBAC for the storage accounts user assigned managed identity gets updated.

Additional context

See the full discussion in #4459

[matthchr]

We need to see if we can recreate this issue and determine what error(s) we're getting here, so that we can ensure that ASO retries correctly on it.