Could you try, for time of debugging, move this rule priority higher? (set it on top). Also, regarding second question. You don't have to create subnet for each workspace. You can share subnets across workspace as you can see in below documenatation entry:

Configure a customer-managed VPC | Databricks Documentation