Enable static code analysis pilot in pipeline

[wtgodbe]

Turn on static code analysis feature in SDL

PR Overview

This pull request enables a static code analysis pilot within the CI pipeline by adding new configuration flags.

• Enables a new policy ("MicrosoftCanary")
• Activates the prefast analysis with break enabled and sets its severity to CriticalError
• Sets new feature flags for prefast versioning and enablement check

Reviewed Changes

File	Description
.azure/pipelines/ci.yml	New static code analysis settings added to the pipeline configuration

Copilot reviewed 1 out of 1 changed files in this pull request and generated no comments.

Comments suppressed due to low confidence (2)

.azure/pipelines/ci.yml:131

• Verify that 'CriticalError' is an accepted value for severity. Some systems expect severity levels in a specific format, such as lowercase.

        severity: CriticalError

.azure/pipelines/ci.yml:134

• [nitpick] Consider renaming 'checkIfEnablePrefast' to a more concise flag, such as 'enablePrefastCheck', to improve clarity and maintain consistency with similar flag naming.

        checkIfEnablePrefast: false

[dotnet-policy-service]

Hey @dotnet/aspnet-build, looks like this PR is something you want to take a look at.

[wtgodbe]

https://dev.azure.com/dnceng/internal/_build/results?buildId=2655498&view=results

[wtgodbe]

Internal build failed - working w/ the static analysis team to figure out a fix

[dotnet-policy-service]

Looks like this PR hasn't been active for some time and the codebase could have been changed in the meantime.
To make sure no conflicting changes have occurred, please rerun validation before merging. You can do this by leaving an /azp run comment here (requires commit rights), or by simply closing and reopening.