Enforce CFSClean network isolation in 1ES pipelines

[Copilot]

• Ports the network isolation policy from Enforce CFSClean for Network Isolation openapi-diff#504

[Mike Harder (mikeharder)]

Copilot: Also port this PR from the other repo, into this PR itself:

Azure/openapi-diff#488

[Copilot]

Copilot: Also port this PR from the other repo, into this PR itself:

Azure/openapi-diff#488

Ported PR #488 in commit a248ef2, including the reusable authenticated npmrc template and its use by the shared Rush build setup.

[Mike Harder (mikeharder)]

Copilot: fix the error in this pipeline:

https://dev.azure.com/azure-sdk/public/_build/results?buildId=6660178&view=logs&j=3dc8fd7e-4368-5a92-293e-d53cefc8c4b3&t=3c663f50-2031-5e5a-5a27-a536dda269a8&l=72

[Copilot]

Copilot: fix the error in this pipeline:

https://dev.azure.com/azure-sdk/public/_build/results?buildId=6660178&view=logs&j=3dc8fd7e-4368-5a92-293e-d53cefc8c4b3&t=3c663f50-2031-5e5a-5a2...

Fixed in 7d50674 by routing the regression test’s dynamic AutoRest core resolution through the authenticated npmrc and Microsoft package-feed proxy.

[Mike Harder (mikeharder)]

Copilot: try porting the technique used in this PR to install pnpm:

Azure/autorest#5194

which is currently failing:

https://dev.azure.com/azure-sdk/public/_build/results?buildId=6660261&view=logs&j=3dc8fd7e-4368-5a92-293e-d53cefc8c4b3&t=3c663f50-2031-5e5a-5a27-a536dda269a8&l=75

[Copilot]

Copilot: try porting the technique used in this PR to install pnpm:

Azure/autorest#5194
...

Fixed in e8c1fa4 by installing the pnpm version pinned in rush.json through the authenticated npm configuration before Rush runs.