When deploying Windows Server 2019 VMs in a scale set using an Azure Resource Manager template, which tool should be used to ensure NGINX is installed on all VMs post-deployment?