Add CFSClean enforcement

[chidozieononiwu]

This pull request makes a small change to the pipeline configuration by updating the networkIsolationPolicy setting. The policy is now set to include both Permissive and CFSClean, which may affect how network isolation is enforced during pipeline runs.

• Pipeline configuration:
  • Updated the networkIsolationPolicy in eng/pipelines/templates/stages/1es-redirect.yml to include CFSClean in addition to Permissive.

azure-dev - ext - microsoft.azd.demo

[azure-pipelines]

Azure Pipelines:
22 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Enables CFSClean enforcement across pipelines using the shared 1ES redirect template.

Changes:

• Adds CFSClean to the network isolation policy.

[jongio]

Verified the multi-value syntax against 1ES usage across the org - Permissive, CFSClean is the standard comma-separated policy format. The prior golang internalModuleProxy setup lines up with enforcing CFSClean, so the network isolation tightening has the internal mirror in place. Scoped and correct.