[0.83] Changes to PR, CI, and Release pipelines (#15861)

* Fix release pipeline (#15821)

* Unified CI/PR Pipeline (#15848)

* Fix tagging and improve security (#15860)

* Use double quotes

* Increase timeout for CodeQL

Author: vmoroz

.ado/build-template.yml

@@ -0,0 +1,29 @@
+#
+# The CI pipeline entry point.
+# Extends build-template.yml with buildEnvironment: Continuous for signed Official builds.
+#
+
+name: 0.0.$(Date:yyMM.d)$(Rev:rrr)
+
+trigger: none
+pr: none
+
+parameters:
+  - name: isReleaseBuild
+    displayName: 'Treat as Release build (skip beachball, use committed versions)'
+    type: string
+    default: auto
+    values:
+      - auto
+      - 'true'
+      - 'false'
+
+variables:
+  - template: variables/windows.yml
+  - group: RNW Secrets
+
+extends:
+  template: build-template.yml@self
+  parameters:
+    buildEnvironment: Continuous
+    isReleaseBuild: ${{ parameters.isReleaseBuild }}

.ado/ci-pipeline.yml

@@ -33,7 +33,7 @@ jobs:
         displayName: yarn integrate-rn
         continueOnError: true
 
-      - powershell: |
+      - pwsh: |
           if (!(Test-Path "$(Agent.TempDirectory)\integration-report.md")) {
             dir "$(Agent.TempDirectory)"
             throw "No integration report generated"
@@ -43,7 +43,7 @@ jobs:
           }
         displayName: Test for changes
 
-      - powershell: |
+      - pwsh: |
           $reportWithHeader = "${{ parameters.commitTitle}}`n`n" + (Get-Content -Raw $(Agent.TempDirectory)\integration-report.md)
           # Trim to max GitHub PR length
           $trimmedReport = $reportWithHeader.substring(0, [math]::min(65536, $reportWithHeader.length))
@@ -55,12 +55,12 @@ jobs:
           git commit -F $(Agent.TempDirectory)\commit-message.md
         displayName: Commit changes
 
-      - powershell: |
+      - pwsh: |
           $commitHash = git log --format=%H -n 1
           Write-Output "##vso[task.setvariable variable=FirstCommit]$commitHash"
         displayName: Save base commit
 
-      - powershell: |
+      - pwsh: |
           $patchScope = node -e "
           const path = require('path');
           const {enumerateRepoPackages} = require('@react-native-windows/package-utils');
@@ -72,7 +72,7 @@ jobs:
           yarn change --scope @($patchScope.split(',')) --message "${{ parameters.commitTitle}}" --type patch
         displayName: Create patch changefiles
 
-      - powershell: |
+      - pwsh: |
           $prereleaseScope = node -e "
           const path = require('path');
           const {enumerateRepoPackages} = require('@react-native-windows/package-utils');
@@ -93,7 +93,7 @@ jobs:
       - script: git push origin integrate-${{ parameters.reactNativeVersion }}
         displayName: Push changes
 
-      - powershell: |
+      - pwsh: |
           $headers = @{'Accept'='application/vnd.github.v3+json'; 'Authorization'='Token $(githubAuthToken)'}
           $body = '{"head": "integrate-${{ parameters.reactNativeVersion }}", "base": "main", "title": "${{ parameters.commitTitle}}"}'
           Invoke-WebRequest -Method Post -Headers $headers -Body $body https://api.github.com/repos/microsoft/react-native-windows/pulls