Add scenario diagrams

Author: geekzter

terraform/azure-devops/create-service-connection/doc-gen/header.md

@@ -51,6 +51,8 @@ Below are common configurations. You can mix & match to create your own.
 
 #### Default configuration
 
+![](visuals/app-fic.png)
+
 This creates an App registration with Federated Identity Credential and `Contributor` role on the Azure subscription used by the Terraform `azurerm` provider.
 
 ```hcl
@@ -68,6 +70,8 @@ Pre-requisites:
 
 #### Managed Identity with FIC and custom RBAC
 
+![](visuals/msi-fic-multi-rbac.png)
+
 This creates a Managed Identity with Federated Identity Credential and custom Azure RBAC (role-based access control) role assignments:
 
 ```hcl
@@ -99,6 +103,8 @@ Pre-requisites:
 
 #### Managed Identity assigned to Entra ID security group
 
+![](visuals/msi-fic-group.png)
+
 This creates a Managed Identity with Federated Identity Credential and custom Azure RBAC (role-based access control) role assignments:
 
 ```hcl