PR Summary

Fixes: #30

This pull request introduces several significant updates across multiple configuration and pipeline files to enhance the build and deployment process, particularly focusing on compliance, signing, and security analysis.

Compliance and Security Enhancements:

• .ci/compliance.yml: Added steps to install PowerShell Core, download and capture artifacts, create a temporary module path, install PSPackageProject and dependencies, and run various security scans such as Component Detection, Defender Scan, CredScan, BinSkim, PoliCheck, and publish security analysis logs.
• .config/tsaoptions.json: Introduced a new configuration file for TSA options, specifying instance URL, project name, area path, codebase name, notification aliases, and tools like CredScan, PoliCheck, and BinSkim.

Build and Signing Process:

• .ci/templates/sign.yml: Added parameters and steps to install .NET Core SDK, generate signing JSON, prepare output folder, and sign files using ESRP.
• .pipelines/threadjobs-official.yml: Created a new pipeline configuration for building, signing, and publishing the ThreadJob module, including scheduled weekly builds, parameters for publishing to PowerShell Gallery, and various stages for building, manual validation, and release.

Dependency Management:

• .github/dependabot.yml: Configured Dependabot to automate dependency updates for NuGet packages and GitHub Actions on a daily schedule.

Build Script Updates:

• build.ps1: Updated the build configuration to use netstandard2.0 instead of net461, included new script variables, and ensured the correct script file is sourced. [1] [2] [3]
• buildtools.psm1: Replaced the PowerShellGet module with Microsoft.PowerShell.PSResourceGet and added a missing line to join the build output path. [1] [2]

PR Context