docs: address review feedback on ARM samples

- Rename ARM JSON heading to 'ARM with Known Permissions (JSON File format)'

- Quote @file paths in PowerShell --initialPermissions examples

- Update Bicep JSON output description to flat scope->permissions map

Author: bgdnext64

docs/commandline-flags-and-env-variables.md

@@ -158,7 +158,7 @@ $env:MPF_SPOBJECTID = "YOUR_SP_OBJECT_ID"
   --verbose
 ```
 
-### Example: ARM with JSON File Format
+### Example: ARM with Known Permissions (JSON File format)
 
 For ARM templates with many pre-requisite permissions, using a JSON file is cleaner. Create a file called `arm-initial-permissions.json`:
 
@@ -202,7 +202,7 @@ $env:MPF_SPCLIENTSECRET = "YOUR_SP_CLIENT_SECRET"
 $env:MPF_SPOBJECTID = "YOUR_SP_OBJECT_ID"
 
 .\azmpf.exe arm `
-  --initialPermissions @arm-initial-permissions.json `
+  --initialPermissions "@arm-initial-permissions.json" `
   --templateFilePath .\samples\templates\aks-private-subnet.json `
   --parametersFilePath .\samples\templates\aks-private-subnet-parameters.json `
   --verbose
@@ -290,7 +290,7 @@ $env:MPF_SPOBJECTID = "YOUR_SP_OBJECT_ID"
 $env:MPF_BICEPEXECPATH = "C:\Program Files\Azure Bicep CLI\bicep.exe"
 
 .\azmpf.exe bicep `
-  --initialPermissions @bicep-backend-permissions.json `
+  --initialPermissions "@bicep-backend-permissions.json" `
   --bicepFilePath .\samples\bicep\aks-private-subnet.bicep `
   --parametersFilePath .\samples\bicep\aks-private-subnet-params.json `
   --verbose

docs/display-options.MD

@@ -208,7 +208,7 @@ export MPF_BICEPEXECPATH=$(which bicep)
 azmpf bicep --bicepFilePath ./samples/bicep/storage-account-simple.bicep --parametersFilePath ./samples/bicep/storage-account-simple-params.json --jsonOutput --verbose
 ```
 
-Output shows JSON with permissions array and permissionsByResourceScope details (similar to ARM example above).
+The Bicep JSON output uses the same format as the ARM example above: a flat map where the subscription ID key contains all aggregate permissions, and each resource scope key contains permissions specific to that resource.
 
 ### Bicep Detailed Output
 

docs/installation-and-quickstart.md

@@ -265,7 +265,7 @@ $env:MPF_SPCLIENTSECRET = "YOUR_SP_CLIENT_SECRET"
 $env:MPF_SPOBJECTID = "YOUR_SP_OBJECT_ID"
 
 .\azmpf.exe arm --templateFilePath .\samples\templates\aks-private-subnet.json --parametersFilePath .\samples\templates\aks-private-subnet-parameters.json `
-  --initialPermissions @arm-initial-permissions.json `
+  --initialPermissions "@arm-initial-permissions.json" `
   --verbose
 ```