Add ADO publish pipeline for PyPI releases

[RyAuld]

Summary

Adds a manually-triggered ADO pipeline (.Pipelines/) that validates, tests, builds, and publishes the msal package to test.pypi.org or pypi.org.

Pipeline stages

1. Validate — confirms the packageVersion parameter matches msal/sku.py version
2. CI — runs the full pytest matrix across Python 3.9–3.13 (mirrors existing PR build)
3. Build — builds sdist + wheel, verifies with wine check, publishes as pipeline artifact
4. Publish — uploads to test.pypi.org (Preview/RC) or pypi.org (Production) depending on the publishTarget parameter; production stage uses the MSAL-Python-Release environment for approval gating

Files added

• .Pipelines/pipeline-publish.yml\ — main pipeline definition
• .Pipelines/template-run-tests.yml\ — pytest step template (mirrors \�zure-pipelines.yml)
• .Pipelines/template-build-package.yml\ — sdist + wheel build template
• .Pipelines/template-publish-package.yml\ — TwineAuthenticate + twine upload template
• .Pipelines/template-install-lab-cert.yml\ — lab cert retrieval (kept for future e2e enablement)
• .Pipelines/ADO-PUBLISH-SETUP.md\ — one-time ADO setup guide

Other changes

• \msal/sku.py\ — bumped version to \1.35.2rc1; fixed stray \�nd\ prefix on module docstring

[gladjohn]

Pipeline	Python Versions
Current CI (azure-pipelines.yml)	3.9, 3.10, 3.11, 3.12, 3.13, 3.14
New Publish - This PR (.Pipelines/pipeline-publish.yml)	3.9, 3.10, 3.11, 3.12, 3.13

Issue:

The new publish pipeline's CI stage is missing Python 3.14. Recommend adding it.

[gladjohn]

Approved with comments. Please Add Python 3.14 to the matrix in .Pipelines/pipeline-publish.yml