[Epic] Migrate workflows to Azure DevOps

Migrate workflows to Azure DevOps for better access control and security enhancements. Unless ADO add support, a significant disadvantage of using ADO for Copilot acesss is that we will need to manually maintain a PAT for it by rotating it every 7 days.

Start by inventorying the existing workflows and the Azure DevOps migration requirements described in this epic. Clarify which workflows are in scope, how access control and security should change, and how the seven-day PAT rotation would be handled. Done means the agreed workflows run in Azure DevOps with the access-control and credential-management concerns resolved.

Written by the indexing model from the issue text.