feat(ir): add typed builder for AzureResourceManagerTemplateDeployment@3

[github-actions]

Summary

Adds a typed builder struct for AzureResourceManagerTemplateDeployment@3 to the ado-aw IR.

Motivation

Previously, any code that needed to emit this ADO task step had to hand-craft TaskStep::new(...) with raw string input keys and no compile-time enforcement of which inputs are required for which deployment scope. This PR introduces a command-dispatch typed builder so required inputs are positional, scope/input combinations are type-checked, and call sites stop using stringly-typed keys.

Changes

• src/compile/ir/tasks/arm_template_deployment.rs: new ArmTemplateDeployment builder struct with the following types:
  • ArmDeploymentCommand — five-variant enum (ResourceGroupDeploy, ResourceGroupDelete, SubscriptionDeploy, ManagementGroupDeploy, TenantDeploy); each variant carries its own scope-specific struct so invalid scope/input combos are unrepresentable
  • ArmDeploymentMode — typed enum for Incremental / Complete / Validation
  • ArmTemplateSource — typed enum for Linked artifact vs URL of the file with a shared with_parameters_file setter
  • Per-scope structs with typed optional setters for shared deploy options (deployment_mode, override_parameters, deployment_name, deployment_outputs, add_spn_to_environment, use_without_json)
  • 7 unit tests covering all deployment scopes, both template sources, and optional inputs
• src/compile/ir/tasks/mod.rs: pub mod arm_template_deployment; declaration (alphabetical order)

ADO Task Reference

• Task: AzureResourceManagerTemplateDeployment@3
• Docs: https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/azure-resource-manager-template-deployment-v3
• Required inputs (vary by scope): deploymentScope, azureResourceManagerConnection, subscriptionId (not for MG/Tenant), resourceGroupName (RG only), location, templateLocation, csmFile/csmFileLink
• Optional inputs: deploymentMode, overrideParameters, deploymentName, deploymentOutputs, addSpnToEnvironment, useWithoutJSON

Validation

• cargo build --all-targets
• cargo test (7 new tests, all passing)
• cargo clippy --all-targets --all-features --workspace -- -D warnings

---

Created by the ado-task-ir-contributor workflow.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• spsprodeus21.vssps.visualstudio.com
• spsprodweu4.vssps.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "spsprodeus21.vssps.visualstudio.com"
    - "spsprodweu4.vssps.visualstudio.com"

See Network Configuration for more information.

Generated by ADO Task IR Contributor · 830.2 AIC · ⌖ 66.2 AIC · ⊞ 38.8K · ◷