Add .config/tsaoptions.json and wire TSA config in release pipeline

Author: Copilot

.config/tsaoptions.json

@@ -0,0 +1,11 @@
+{
+    "instanceUrl": "https://microsoft.visualstudio.com",
+    "projectName": "OS",
+    "areaPath": "OS\\Windows Client and Services\\WinPD\\DFX-Developer Fundamentals and Experiences\\DEFT\\InstaDev",
+    "iterationPath": "OS\\Future",
+    "notificationAliases": [
+        "instadev@microsoft.com"
+    ],
+    "ignoreBranchName": true,
+    "repositoryName": "winget-create"
+}

pipelines/azure-pipelines.release.yml

@@ -32,6 +32,12 @@ resources:
 extends:
   template: v2/Microsoft.Official.yml@templates
   parameters:
+    globalSdl:
+      tsa:
+        enabled: true
+        configFile: $(Build.SourcesDirectory)\.config\tsaoptions.json
+        onboard: false
+
     featureFlags:
       WindowsHostVersion:
         Version: 2022