[release/8.0.1xx] Use MI in VMR sync pipeline instead of an AzDO PAT

[premun]

dotnet/arcade-services#6062

[Copilot]

Pull request overview

This PR updates the VMR synchronization pipeline to stop using an Azure DevOps PAT variable group and instead use a federated (WIF) token when syncing internal VMR branches, aligning with the move toward managed identity / federated auth.

Changes:

• Switch vmr-sync.sh invocation to use $(AzdoToken) instead of the dn-bot-all-orgs-code-r PAT variable.
• Remove the DotNetBot-AzDO-PAT variable group reference from the internal/release job path.
• Add a step to mint an AzDO access token via /eng/common/templates-official/steps/get-federated-access-token.yml (outputting AzdoToken).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
eng/pipelines/templates/steps/vmr-pull-updates.yml	Updates the vmr-sync.sh call to use $(AzdoToken) for --azdev-pat.
eng/pipelines/templates/jobs/vmr-synchronization.yml	Removes PAT variable group usage and adds a federated-token minting step for internal/release syncs.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.