[release/6.5] Port pipeline changes

[AndriySvyryd]

No description provided.

[Copilot]

Pull request overview

Ports updated CI/release pipeline behavior onto the release/6.5 branch, aligning packaging artifacts and release publishing flow (including .snupkg symbols and a new artifact name used by the release pipeline).

Changes:

• Enable .snupkg symbol package output via SymbolPackageFormat.
• Update the official CI pipeline to optionally stabilize package versions for final builds, add a release-candidate tag, and publish a dedicated PackageArtifactsSbom artifact.
• Update the release pipeline to consume PackageArtifactsSbom, add network isolation settings, add a manual approval message, verify package signatures, and push both .nupkg and .snupkg.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
Directory.Build.props	Sets symbol package format to snupkg for packing.
azure-pipelines.yml	Adds final-build parameterization, adjusts SDL/BinSkim settings, tags RC builds, and publishes PackageArtifactsSbom.
azure-pipelines-release.yml	Consumes PackageArtifactsSbom, adds signature verification, and updates NuGet push inputs/settings.
azure-pipelines-public.yml	Simplifies the public pipeline to always run with public settings (no internal-only branching).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.