Get rid of vscode-engineering template in the npm publish pipeline (#1328)

It's been a disaster trying to get the pipeline running from a different
org. I keep running into service connection and permission issues,
fixing one just reveals two more. At this point it doesn't seem feasible
to use the `vscode-engineering` template from another org.

I looked at some other pipelines we migrated for extensions like
`pylint`, and they dropped the template and just run the raw jobs for
npm pack and publishing. I'm going to try the same approach for this
extension.

Author: StellaHuang95

build/azure-pipeline.npm.yml

@@ -5,49 +5,124 @@ pr: none
 
 resources:
   repositories:
-    - repository: templates
-      type: github
-      name: microsoft/vscode-engineering
-      ref: main
-      endpoint: Monaco
+    - repository: MicroBuildTemplate
+      type: git
+      name: 1ESPipelineTemplates/MicroBuildTemplate
+      ref: refs/tags/release
 
 parameters:
   - name: quality
-    displayName: Quality
+    displayName: 📦 Release Quality
     type: string
-    default: latest
+    default: stable
     values:
-      - latest
-      - next
-  - name: publishPythonEnvsApi
-    displayName: 🚀 Publish @vscode/python-environments
+      - stable
+      - preview
+
+  - name: publishPackage
+    displayName: 🚀 Publish to npm
     type: boolean
     default: false
 
+  - name: buildSteps
+    type: stepList
+    default:
+      - task: NodeTool@0
+        inputs:
+          versionSpec: '22.21.1'
+        displayName: Select Node version
+
+      - script: npm ci
+        workingDirectory: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+        displayName: Install package dependencies
+
+      - script: npm run compile
+        workingDirectory: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+        displayName: Compile TypeScript
+
+      - script: npm pack --ignore-scripts
+        workingDirectory: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+        displayName: Pack npm package
+
+variables:
+  - name: TeamName
+    value: vscode-python-environments
+  - name: PackageName
+    value: '@vscode/python-environments'
+  - name: PackageDir
+    value: pythonEnvironmentsApi
+  - name: npmTag
+    ${{ if eq(parameters.quality, 'preview') }}:
+      value: next
+    ${{ else }}:
+      value: latest
+
 extends:
-  template: azure-pipelines/npm-package/pipeline.yml@templates
+  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
   parameters:
-    npmPackages:
-      - name: pythonEnvironmentsApi
-        testPlatforms:
-          - name: Linux
-            nodeVersions:
-              - 22.21.1
-          - name: MacOS
-            nodeVersions:
-              - 22.21.1
-          - name: Windows
-            nodeVersions:
-              - 22.21.1
-        testSteps:
-          - template: /build/templates/test-steps.yml@self
-            parameters:
-              package: pythonEnvironmentsApi
-        buildSteps:
-          - template: /build/templates/pack-steps.yml@self
-            parameters:
-              package: pythonEnvironmentsApi
-        ghTagPrefix: release/pythonEnvironmentsApi/
-        tag: ${{ parameters.quality }}
-        publishPackage: ${{ parameters.publishPythonEnvsApi }}
-        workingDirectory: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+    sdl:
+      sourceAnalysisPool: VSEngSS-MicroBuild2022-1ES
+      codeSignValidation:
+        enabled: true
+      sbom:
+        enabled: true
+    pool:
+      name: AzurePipelines-EO
+      os: windows
+
+    customBuildTags:
+      - ES365AIMigrationTooling
+
+    stages:
+      - stage: Build
+        displayName: Build & Pack
+        jobs:
+          - job: BuildPackage
+            displayName: Build npm package
+            steps:
+              - ${{ each step in parameters.buildSteps }}:
+                  - ${{ step }}
+
+              - task: CopyFiles@2
+                displayName: Copy package tarball to staging
+                inputs:
+                  sourceFolder: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+                  contents: '*.tgz'
+                  targetFolder: $(Build.ArtifactStagingDirectory)
+
+              - task: 1ES.PublishBuildArtifacts@1
+                displayName: Publish build artifact
+                inputs:
+                  pathToPublish: $(Build.ArtifactStagingDirectory)
+                  artifactName: npm-package
+
+      - stage: Publish
+        displayName: Publish to npm
+        dependsOn: Build
+        condition: and(succeeded(), eq('${{ parameters.publishPackage }}', 'true'))
+        jobs:
+          - job: PublishPackage
+            displayName: Publish $(PackageName)
+            steps:
+              - task: DownloadBuildArtifacts@1
+                displayName: Download build artifact
+                inputs:
+                  buildType: current
+                  downloadType: single
+                  artifactName: npm-package
+                  downloadPath: $(Build.ArtifactStagingDirectory)
+
+              - task: NodeTool@0
+                inputs:
+                  versionSpec: '22.21.1'
+                displayName: Select Node version
+
+              - bash: echo '//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}' > .npmrc
+                workingDirectory: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+                displayName: Configure npm auth
+
+              - bash: npm publish $(Build.ArtifactStagingDirectory)/npm-package/*.tgz --tag $(npmTag) --access public
+                displayName: Publish to npm (${{ parameters.quality }})
+                workingDirectory: $(Build.SourcesDirectory)/pythonEnvironmentsApi
+                env:
+                  NODE_AUTH_TOKEN: $(NpmAuthToken)