Fix GitHub Actions workflow and Azure Pipelines issues from review feedback

[Copilot]

Several correctness and safety issues in the GitHub Actions and Azure Pipelines workflows identified during review: fuzzer CI could silently pass with crash findings, dotnet pack payload versioning was inconsistent with the package version, and NuGet push steps in ADO lacked branch/parameter gates allowing unintended publishes from any branch.

Changes

.github/workflows/ci.yml

• Added --no-restore to fuzzer dotnet run to prevent a second restore against the wrong NuGet config
• Added a post-fuzzer step that scans for crash_*.txt findings and fails CI if any exist

.github/workflows/package-unsigned.yml

• dotnet pack now passes Version, FileVersion, and InformationalVersion alongside PackageVersion so the tool binary metadata inside the nupkg is consistent with the declared package version

.pipelines/CosmosDB-Shell-Official.yml

• Restored publishNuget queue-time boolean parameter and re-added Build.SourceBranch == refs/heads/main && publishNuget == true guard on both NuGet push steps
• Fixed version normalization: $buildNumber is now updated after normalization so CosmosDBShell_InformationalVersion is derived from the canonical version rather than the pre-normalization value

CONTRIBUTING.md

• Corrected wording: "produces unsigned package artifacts" → "uploads unsigned artifacts" (the workflow uploads to GitHub Actions artifacts, not a feed)

---

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.