feat(ir): add typed builder for DownloadSecureFile@1

[github-actions]

Summary

Adds a typed builder struct for DownloadSecureFile@1 to the ado-aw IR.

Motivation

Previously, any code that needed to emit a DownloadSecureFile@1 step had to
hand-craft TaskStep::new("DownloadSecureFile@1", ...) with raw string input
keys. This PR introduces a typed builder struct (new(<required>) + typed
optional setters + into_step()) so the required secureFile input is
positional and optional inputs are type-checked, preventing silent key-name
mistakes.

Changes

• src/compile/ir/tasks/download_secure_file.rs: new DownloadSecureFile
  builder struct and its #[cfg(test)] mod tests (4 unit tests)
• src/compile/ir/tasks/mod.rs: pub mod download_secure_file; declaration
  (inserted alphabetically between download_pipeline_artifact and extract_files)

ADO Task Reference

• Task: DownloadSecureFile@1
• Docs: (https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/download-secure-file-v1)
• Required inputs: secureFile — name or GUID of the secure file in the ADO Secure Files library
• Optional inputs: retryCount (default "8"), socketTimeout
• Output variable: $(DownloadSecureFile.secureFilePath)

Validation

• cargo build --all-targets
• cargo test
• cargo clippy --all-targets --all-features --workspace -- -D warnings

---

Created by the ado-task-ir-contributor workflow.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• spsprodeus21.vssps.visualstudio.com
• spsprodweu4.vssps.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "spsprodeus21.vssps.visualstudio.com"
    - "spsprodweu4.vssps.visualstudio.com"

See Network Configuration for more information.

Generated by ADO Task IR Contributor · 848.1 AIC · ⌖ 26.3 AIC · ⊞ 38.1K · ◷