* support subnet can refer nsg in another resource group * support 3 types of refer resources * fix * fix tyoe * update example