Add ADO definitions for P0 PR checks

[Pawel Winogrodzki (PawelWMS)]

What

Add four 1ES-governed Azure Pipeline definitions under .pipelines/prchecks/ado/:

• Check Manifests
• Spec Entanglement Mismatch Check
• Spec files check
• Static glibc version check

Why

Provide Azure Pipeline equivalents for the existing P0 repository validations while keeping the current GitHub Actions unchanged during parity testing.

Risk

This is a draft. No existing trigger or workflow is modified. The new definitions are inactive until corresponding pipeline definitions and PR policies are configured. Runtime parity must be validated in Azure Pipelines before this PR is ready.

Verification

• Parsed all four YAML files.
• Validated every inline Bash block with bash -n.
• Ran deterministic checks for governed-template usage, pool selection, internal feed authentication, Python 3.12 enforcement, and source-script parity.
• Ran git diff --check and public-hygiene scans.
• Local script execution is blocked by a dependency supplied through the authenticated build feed; runtime validation remains pending in Azure Pipelines.

Review strategy: self-review only.