Configure explicit TSA codebase settings in OneBranch release pipeline

[Copilot]

The OneBranch release pipeline was relying on an auto-generated TSA codebase name that included / (microsoft_Apps_microsoft/winget-create), causing TSA onboarding to fail with PreconditionFailed. This change explicitly configures TSA metadata so onboarding uses a TSA-safe codebase identity while keeping the existing official template.

• TSA configuration override (under extends.parameters)

  • Added globalSdl.tsa.enabled: true
  • Added explicit TSA config to prevent invalid auto-generated codebase names.

• Template and pipeline shape preserved

  • Kept v2/Microsoft.Official.yml@templates
  • Scoped the change only to pipelines/azure-pipelines.release.yml

extends:
  template: v2/Microsoft.Official.yml@templates
  parameters:
    globalSdl:
      tsa:
        enabled: true
        config:
          tsaVersion: TsaV2
          codebase: NewOrUpdate
          codebaseName: winget-create
          repositoryName: winget-create