[0.70] Disable SBOM signing on CI/PRs

Backports #11657 to 0.70.

## Description

Our SBOM manifests can only be signed when running pipelines in the internal ADO for publishing official builds. This PR changes the config not not sign the manifests for PR/CI.

### Type of Change
- Bug fix (non-breaking change which fixes an issue)

### Why
Unblock PRs.

### What
Added variable to only enable signing when on the right ADO instance.

## Screenshots
N/A

## Testing
N/A

.ado/variables/shared.yml

@@ -5,6 +5,9 @@ variables:
   runCodesignValidationInjection: false
   skipComponentGovernanceDetection: true
 
+  # SBOM signing only works on microsoft ADO
+  Packaging.EnableSBOMSigning: ${{ startsWith(variables['System.CollectionUri'], 'https://dev.azure.com/microsoft') }}
+
   # Enables `chalk` to show colored output to Azure Pipelines
   FORCE_COLOR: 3