Route signed-binary packages through a per-artifact release path

[Daniel Jurek (danieljurek)]

Packages that ship compiled binaries need ESRP-signed wheels before release, but signing was keyed off ServiceDirectory, which pulled every storage package onto the signed path. Make it a per-artifact opt-in instead.

• An artifact sets signBinaries: true in its service ci.yml to get a Sign_<safeName> stage and release from packages_<safeName>_signed
• Every other artifact releases from packages_extended off the build stage as before, so a service can mix both kinds
• Release jobs move verbatim into release-artifact.yml so the two paths stay single-sourced
• Signing runs on release and scheduled builds, never on PR builds
• Integration publishes the signed wheels for opted-in artifacts

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
10 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[github-actions]

[Pilot] PR Pipeline Failure Analysis

What failed

Build 6834566 — check python - pullrequest (Build Analyze) — failed on two independent validation steps, both triggered by the new sdk/template/azure-template-two package added in this PR:

1. CSpell spell-check (log /tmp/log-analysis-fcd81ec1407343c4aed539c0b0b99062.txt:232) — 17 unknown-word errors across 6 files in the new package, all variants of the identifiers chosen for the fixture (istrue, istruemodule, SSIZE):

• sdk/template/azure-template-two/CHANGELOG.md:7:45
• sdk/template/azure-template-two/README.md:10:32, 12:1
• sdk/template/azure-template-two/azure/template/two/__init__.py:7:15, 9:13
• sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:4:12 (SSIZE), 14:20, 19:20, 21:6, 24:5, 28:8
• sdk/template/azure-template-two/setup.py:38:14, 39:38
• sdk/template/azure-template-two/tests/test_istrue.py:7:32, 11:12, 18:9, 24:12

2. README structure validation (ward scan) (log /tmp/log-analysis-de43af534c544db484b985552be5d4c6.txt:174) — sdk/template/azure-template-two/README.md is missing required headers:
^Azure (.+ client library for Python|Smoke Test for Python|AI Agent Server Adapter for .*Python), Getting started, Key concepts, Examples, Troubleshooting, Next steps.

The python - storage and python - template checks were cancelled as a side effect of the Build Analyze failure, not independent failures.

Relevant pipeline output

2026-09-14T21:53:10.1146325Z ##[error]sdk/template/azure-template-two/CHANGELOG.md:7:45 - Unknown word (istrue)
2026-09-14T21:53:10.1150159Z ##[error]sdk/template/azure-template-two/README.md:10:32 - Unknown word (istrue)
2026-09-14T21:53:10.1155880Z ##[error]sdk/template/azure-template-two/README.md:12:1 - Unknown word (istrue)
2026-09-14T21:53:10.1161750Z ##[error]sdk/template/azure-template-two/azure/template/two/__init__.py:7:15 - Unknown word (istrue)
2026-09-14T21:53:10.1168077Z ##[error]sdk/template/azure-template-two/azure/template/two/__init__.py:9:13 - Unknown word (istrue)
2026-09-14T21:53:10.1173160Z ##[error]sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:4:12 - Unknown word (SSIZE)
2026-09-14T21:53:10.1179520Z ##[error]sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:14:20 - Unknown word (istrue)
2026-09-14T21:53:10.1185496Z ##[error]sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:19:20 - Unknown word (istrue)
2026-09-14T21:53:10.1191320Z ##[error]sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:21:6 - Unknown word (istrue)
2026-09-14T21:53:10.1196524Z ##[error]sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:24:5 - Unknown word (istrue)
2026-09-14T21:53:10.1202356Z ##[error]sdk/template/azure-template-two/azure/template/two/src/istruemodule.c:28:8 - Unknown word (istrue)
2026-09-14T21:53:10.1207780Z ##[error]sdk/template/azure-template-two/setup.py:38:14 - Unknown word (istrue)
2026-09-14T21:53:10.1213888Z ##[error]sdk/template/azure-template-two/setup.py:39:38 - Unknown word (istruemodule)
2026-09-14T21:53:10.1219004Z ##[error]sdk/template/azure-template-two/tests/test_istrue.py:7:32 - Unknown word (istrue)
2026-09-14T21:53:10.1224837Z ##[error]sdk/template/azure-template-two/tests/test_istrue.py:11:12 - Unknown word (istrue)
2026-09-14T21:53:10.1230765Z ##[error]sdk/template/azure-template-two/tests/test_istrue.py:18:9 - Unknown word (istrue)
2026-09-14T21:53:10.1254564Z ##[error]sdk/template/azure-template-two/tests/test_istrue.py:24:12 - Unknown word (istrue)
...
2026-09-14T21:55:02.0491070Z 1 readme has at least one missing required section.
2026-09-14T21:55:02.0491733Z /sdk/template/azure-template-two/README.md is missing headers with patterns:
2026-09-14T21:55:02.0492178Z  * ^Azure (.+ client library for Python|Smoke Test for Python|AI Agent Server Adapter for .*Python)
2026-09-14T21:55:02.0492557Z  * ^Getting started$
2026-09-14T21:55:02.0492878Z  * ^Key concepts$
2026-09-14T21:55:02.0493171Z  * ^Examples$
2026-09-14T21:55:02.0493482Z  * ^Troubleshooting$
2026-09-14T21:55:02.0493736Z  * ^Next steps$

Recommended next steps

• Add istrue, istruemodule, and SSIZE to the repo cspell allow-list (typically .vscode/cspell.json) so the new fixture's identifiers are accepted, or rename the identifiers if a common word is preferred.
• Update sdk/template/azure-template-two/README.md to include the required section headers (## Getting started, ## Key concepts, ## Examples, ## Troubleshooting, ## Next steps) and a title matching the expected client-library pattern, following the format used by other package READMEs (e.g. sdk/template/azure-template).
• See https://aka.ms/ci-fix

Automated fix: Requested

Generated by Pipeline Analysis Next Steps · auto · 104.1 AIC · ⌖ 2.56 AIC · ⊞ 9.2K · ◷