Enable microbuild PME signing (#8537)

Author: dibarbet

azure-pipelines/build.yml

@@ -36,6 +36,13 @@ jobs:
     inputs:
       versionSpec: 3.11
 
+  # Non-windows signing requires .NET 8 installed on the machine.
+  - ${{ if ne(parameters.platform, 'windows') }}:
+    - task: UseDotNet@2  
+      displayName: Use .NET Core sdk 8.0.x  
+      inputs:  
+        version: 8.0.x
+
   # If we're in an official build, install the signing plugin
   - ${{ if eq(parameters.isOfficial, true) }}:
     - task: MicroBuildSigningPlugin@4
@@ -45,6 +52,13 @@ jobs:
         zipSources: false
         feedSource: https://dnceng.pkgs.visualstudio.com/_packaging/MicroBuildToolset/nuget/v3/index.json
         azureSubscription: 'MicroBuild Signing Task (DevDiv)'
+        # ConnectedPMEServiceName is only required for CI builds.  Windows has a different pme service name from non-windows.
+        # THis service name is dependent on the AzDo org as well.
+        ${{ if eq(variables['Build.Reason'], 'IndividualCI') }}:
+          ${{ if ne(parameters.platform, 'windows') }}:
+            ConnectedPMEServiceName: c24de2a5-cc7a-493d-95e4-8e5ff5cad2bc
+          ${{ else }}:
+            ConnectedPMEServiceName: 248d384a-b39b-46e3-8ad5-c2c210d5e7ca
       env:
         SignType: $(signType)
         TeamName: $(teamName)
@@ -59,13 +73,19 @@ jobs:
     displayName: 'Build VSIXs'
     env:
       SignType: $(signType)
+      # Non-windows signing requires this token to be passed with signing step.
+      ${{ if ne(parameters.platform, 'windows') }}:
+        SYSTEM_ACCESSTOKEN: $(System.AccessToken)
 
   - ${{ if eq(parameters.isOfficial, true) }}:
     - script: gulp signVsix
       condition: succeeded()
       displayName: 'Sign VSIXs'
       env:
+        # Non-windows signing requires this token to be passed with signing step.
         SignType: $(signType)
+        ${{ if ne(parameters.platform, 'windows') }}:
+          SYSTEM_ACCESSTOKEN: $(System.AccessToken)
 
   - task: CopyFiles@2
     inputs: