This PR pushes multiple improvements to the pipeline definition:

• Swaps ms build and vstest tasks by dotnet cli, to prepare an eventual transition to an ubuntu agent (performance) and for clarity
• Adds policheck, credscan, binskim, and antimalware scan tasks (compliance)
• Adds a deploy stage to avoid relying on the older release management, and use the same approbation rules defined in the environment across projects.

One thing I haven't included is the "has the version been bumped test" because I think further changes should be done to this pipeline:

• The deploy job should be splat into 3 jobs (deploy open API, deploy readers, deploy hidi) so each module can be deployed indenpendently from one another.
• Before each of those jobs, should be a reflective "check-openapi/reader/hidi version has been bumped" job that'd fail in case this was forgotten.

https://microsoftgraph.visualstudio.com/Graph%20Developer%20Experiences/_build/results?buildId=68725&view=results