Backport #92296 and #92438 to release/6.0-staging

[amanasifkhalid]

This is the first of multiple PRs to replicate @eduardo-vp's work of merging commits needed to transition the release/6.0-staging branch to 1ES pipeline templates. Because this branch and main have diverged quite a bit, I found it safer to manually merge each change by hand, rather than relying on git cherry-pick. As such, this PR probably warrants extra scrutiny...

Official build: https://dev.azure.com/dnceng/internal/_build/results?buildId=2448493&view=results

cc @agocke @jkoritzinsky

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.

[amanasifkhalid]

/azp run runtime

[azure-pipelines]

Azure Pipelines failed to run 1 pipeline(s).

[amanasifkhalid]

Failures in public CI are known

[amanasifkhalid]

ping @agocke (sorry, I didn't realize Jeremy is out of office at the moment)

[agocke]

LGTM. FYI, if the PGO build is broken, we probably won't find the issue until it flows up the stack. There's nothing to do about that, it's just the way it works.

[amanasifkhalid]

Thank you!

LGTM. FYI, if the PGO build is broken, we probably won't find the issue until it flows up the stack. There's nothing to do about that, it's just the way it works.

I see, I'll keep this in mind.

[jeffschwMSFT]

approved. we can treat this as tell mode, merge when ready

cc @carlossanlop