Apply PAT-less Maven auth + network-isolation mirror to ci-build.yml

Mirror the daily-ci change: replace the ARTIFACTS_PAT server with MavenAuthenticate@0 (System.AccessToken) and route resolution through the feed via mirrorOf=*. The GPG signing profile is preserved, and deploy still stages locally via altDeploymentRepository, so no distributionManagement/pom change is needed.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: ramsessanchez

.azure-pipelines/ci-build.yml

@@ -73,13 +73,13 @@ extends:
 
                   $settingsXml = @"
                   <settings>
-                    <servers>
-                      <server>
-                        <id>GraphDeveloperExperiencesPublic</id>
-                        <username>microsoftgraph</username>
-                        <password>${{ variables.ARTIFACTS_PAT }}</password>
-                      </server>
-                    </servers>
+                    <mirrors>
+                      <mirror>
+                        <id>GraphDeveloperExperiences_Public</id>
+                        <mirrorOf>*</mirrorOf>
+                        <url>https://microsoftgraph.pkgs.visualstudio.com/0985d294-5762-4bc2-a565-161ef349ca3e/_packaging/GraphDeveloperExperiences_Public/maven/v1</url>
+                      </mirror>
+                    </mirrors>
                     <profiles>
                       <profile>
                         <id>signing</id>
@@ -96,6 +96,11 @@ extends:
                   $settingsXml | Set-Content (Join-Path $settingsDir "settings.xml") -Encoding UTF8
                 displayName: Configure Maven settings
 
+              - task: MavenAuthenticate@0
+                displayName: Authenticate to Azure Artifacts feed (PAT-less)
+                inputs:
+                  artifactsFeeds: 'GraphDeveloperExperiences_Public'
+
               - script: ./mvnw install -Psigning --no-transfer-progress
                 displayName: Publish to local Maven for verification
                 condition: contains(variables['build.sourceBranch'], 'refs/tags/v')