welp, trying to do it manually - am I doing something wrong here? for some reason the workpool cant auth to my acr - I made sure the managed identity has acrpull on the acr it needs to access: