AzDo is removing PATs soon. We need to transition the only remaining pipeline we own to use a Managed Identity for authentication over a PAT. This should be all of them https://dev.azure.com/dnceng/internal/_build?pipelineNameFilter=synch