Consider using Azure Blueprints

[NicolasKP-EC]

Theoretically they can group the different ARM templates together, they have versioning, and they can tell you which version is installed on each environment. You can also implement locking of some resources (but it has lots of side effects. It blocks all POSTs, and some things you would consider as READ are implemented with POSTs).
They support updating of variables after the initial installation.

https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
and: https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/lifecycle

It would be replacing maybe nuget packages? Who installs it? In the nuget we can easily give this to a customer to run. Can we do that with a Blueprint?