Compliant CFS configuration

[tkyc]

This PR is for being compliant with the company's security policies. Msft requires OSS project to pull from a public Azure Artifacts Feed for dependencies.

For open source contributors, you may encounter a 401 error when attempting to download dependencies. In which case, you can wait for a maintainer to update the public Azure Artifact Feed, or you can point the project's pom.xml to maven central instead to get around it.

For maintainers, any time a dependency version is updated, we also need to update the Azure Artifact Feed. Otherwise, public users won't be able to pull the dependency and our internal pipelines would fail.

Maintainers should refer to the internal doc on how to update the public Azure Artifacts Feed.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 50.67%. Comparing base (fe56e25) to head (a226bb1).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #2504   +/-   ##
=========================================
  Coverage     50.66%   50.67%           
- Complexity     3826     3828    +2     
=========================================
  Files           145      145           
  Lines         33133    33133           
  Branches       5558     5558           
=========================================
+ Hits          16788    16790    +2     
  Misses        13944    13944           
+ Partials       2401     2399    -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.