…gging and Sarif output

sudo contains some C++ code, which needs to be built with the Microsoft-approved set of warnings and compliance tools enabled.

Closes #58205501

Cherry picked from !13243566

Cherry-picked from commit `9f50d797`.

Prior versions have been blocked.

This is required as part of offboarding our non-user service account.

…ersal of user-originated junctions

Like it says on the tin. Our platform is a Swiss cheese.

Related work items: MSFT-63265712

…LE rights

Apparently this allows a receiver to get ALL_ACCESS for some stupid reason.

Related work items: MSFT-63521808

…x CI/build

2019 is pushing up proverbial daisies.

…on daily loc

This became required on 9/30.

Also, I had apparently just never migrated the daily loc submission build to the new TDBuild task.

----
#### AI description  (iteration 1)
#### PR Classification
CI/build pipeline update to adopt Federated Identity authentication and ServiceTreeID for Touchdown localization build tasks.

#### PR Summary
This PR updates the localization build pipelines to use the newer Touchdown build task version with Federated Identity authentication and includes a ServiceTreeID parameter.
- `.pipelines/daily-loc-build.yml`: Upgraded `TouchdownBuildTask` from v3 to v5, replaced `SubjectNameIssuer` auth with `FederatedIdentityTDBuild`, added `serviceTreeId` input.
- `.pipelines/steps-fetch-and-prepare-localizations.yml`: Added `serviceTreeId` input to the localization download step for consistency with the daily build pipeline.
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->