Update CI image from 1es-azurelinux-3 to build.azurelinux.3.amd64

[Copilot]

Description

Switch the native build/sign pipeline's Linux pool image from 1es-azurelinux-3 to build.azurelinux.3.amd64. The latter is the standard lighter-weight image used across dotnet repos — 1es-azurelinux-3 pulls unnecessary extra packages, increasing image size and pull time.

Checklist

• Is this feature complete?
  • Yes. Ready to ship.
  • No. Follow-up changes expected.
• Are you including unit tests for the changes and scenario tests if relevant?
  • Yes
  • No
• Did you add public API?
  • Yes
    • If yes, did you have an API Review for it?
      • Yes
      • No
    • Did you add <remarks /> and <code /> elements on your triple slash comments?
      • Yes
      • No
  • No
• Does the change make any security assumptions or guarantees?
  • Yes
    • If yes, have you done a threat model and had a security review?
      • Yes
      • No
  • No
• Does the change require an update in our Aspire docs?
  • Yes
    • Link to aspire.dev issue:
      • New issue
  • No

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[CI] Update to new build.azurelinux.3.amd64 image</issue_title>
<issue_description>@radical FYI we're using build.azurelinux.3.amd64 pretty much everywhere else. The 1es-azurelinux-3 contains a lot of additional stuff which we typically don't need (makes the image bigger and slower to pull)

Originally posted by @akoeplinger in #15055 (comment)
</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes [CI] Update to new build.azurelinux.3.amd64 image #15329

---

💬 Send tasks to Copilot coding agent from Slack and Teams to turn conversations into code. Copilot posts an update in your thread when it's finished.

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 15330

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 15330"

[Copilot]

Pull request overview

This PR updates the native build/sign pipeline configuration to use the standard .NET repo Linux pool image (build.azurelinux.3.amd64) instead of 1es-azurelinux-3, reducing image size and pull time for CI.

Changes:

• Switch Linux pool image in the native build/sign pipeline from 1es-azurelinux-3 to build.azurelinux.3.amd64.

[radical]

Validated with an internal build.

[joperezr]

/backport to release/13.2

[github-actions]

Started backporting to release/13.2 (link to workflow run)

[aspire-repo-bot]

@joperezr backporting to release/13.2 failed, the patch most likely resulted in conflicts. Please backport manually!

git am output

$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch

Creating an empty commit: Initial plan
Applying: Update CI image from 1es-azurelinux-3 to build.azurelinux.3.amd64
Using index info to reconstruct a base tree...
M	eng/pipelines/templates/build_sign_native.yml
Falling back to patching base and 3-way merge...
Auto-merging eng/pipelines/templates/build_sign_native.yml
CONFLICT (content): Merge conflict in eng/pipelines/templates/build_sign_native.yml
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0002 Update CI image from 1es-azurelinux-3 to build.azurelinux.3.amd64
Error: The process '/usr/bin/git' failed with exit code 128

Link to workflow output