Add publishing workload-sets to a deployment with approval

[MiYanni]

Summary

The current workload-set pipeline publishes to the feedForPublishing feed when publishToFeed is set to true. That is designated here and here.

This should be changed so that:

• Publishing is a separate job that depends on the main build job
  • You'll need to download the specific artifacts in the job that are needed for publishing
• Publishing requires approval via a deployment job using the provided environment
  • Message First Responders if you need to get added to the environment so you can test the approval process

I suggest not making the deployment job actually publish the workload-set right away. Do some other action and use that to verify everything is working properly. Then, put the pre-existing publish task in there. You can possibly talk to @marcpopMSFT to publish a throwaway workload-set version to test publish end-to-end.

Other Info

• Guide on deployments: https://medium.com/@aksharsri/add-approval-gates-in-azure-devops-yaml-based-pipelines-a06d5b16b7f4
• Our environment that I had created: https://dnceng.visualstudio.com/internal/_environments/42?view=checks