adding ado pipeline

Author: nmetulev

.pipelines/ci.yml

@@ -0,0 +1,43 @@
+trigger:
+  branches:
+    include:
+      - main
+      - dev/**
+  tags:
+    exclude:
+      - '*'
+pr: none
+
+resources:
+  repositories:
+  - repository: 1esPipelines
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+
+extends:
+  template: v1/1ES.Unofficial.PipelineTemplate.yml@1esPipelines
+  parameters:
+    # SDL/compliance (PoliCheck, CredScan, Roslyn, BinSkim, etc.) is provided
+    # by the 1ES template. Source analysis runs on this pool.
+    sdl:
+      sourceAnalysisPool:
+        name: Azure-Pipelines-1ESPT-ExDShared
+        image: windows-latest
+        os: windows
+    stages:
+    - stage: Build
+      jobs:
+      - job: Build
+        pool:
+          name: Azure-Pipelines-1ESPT-ExDShared
+          image: windows-latest
+          os: windows
+          hostArchitecture: amd64
+        steps:
+          - checkout: self
+          - task: UseDotNet@2
+            displayName: Setup .NET 10
+            inputs:
+              version: 10.0.x
+          - template: ./.pipelines/templates/build.yaml@self

.pipelines/templates/build.yaml

@@ -0,0 +1,13 @@
+# Builds the C# tools in this repo so SDL/compliance scanners (PoliCheck,
+# CredScan, Roslyn, BinSkim, etc.) injected by the 1ES template have source
+# and binaries to analyze. This pipeline is compliance-only: it does not
+# publish artifacts, sign anything, or produce releases. PR validation lives
+# in .github/workflows/pr-validation.yml.
+
+steps:
+- task: PowerShell@2
+  displayName: Build C# tools (analyzer, winmd-cli, winui-search)
+  inputs:
+    pwsh: true
+    filePath: $(System.DefaultWorkingDirectory)\scripts\build-tools.ps1
+    arguments: '-SkipPayloadRefresh'