Fix axios supply chain vulnerability in CI scripts

ci/ci-test-tasks/.npmrc

@@ -0,0 +1,3 @@
+registry=https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/
+
+always-auth=true

ci/ci-test-tasks/detect-changes.yml

@@ -29,9 +29,13 @@ jobs:
   pool:
     vmImage: ubuntu-20.04
   steps:
+  - task: NpmAuthenticate@0
+    inputs:
+      workingFile: ci/ci-test-tasks/.npmrc
   - script: |
-      npm i axios
-    displayName: npm i axios
+      cd ci/ci-test-tasks
+      npm ci --ignore-scripts
+    displayName: npm ci (axios)
   - script: |
       echo $(tasks)
       node ./ci/ci-test-tasks/run-main-and-verify.js $(ADOToken) $(ADOUrl) $(System.TeamProject) $(MainPipelineId) $(tasks)

ci/ci-test-tasks/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "ci-test-tasks-scripts",
+  "version": "1.0.0",
+  "private": true,
+  "description": "CI scripts for azure-pipelines-tasks test infrastructure",
+  "dependencies": {
+    "axios": "1.14.0"
+  }
+}

ci/ci-test-tasks/test-init.yml

@@ -7,5 +7,11 @@ steps:
     tfx login --auth-type pat --service-url $(ADOUrl) --token $(ADOToken)
   displayName: 'Tfx login'
 
-- script: npm install axios@0.27.2
-  displayName: 'Npm install axios'
+- task: NpmAuthenticate@0
+  inputs:
+    workingFile: ci/ci-test-tasks/.npmrc
+
+- script: |
+    cd ci/ci-test-tasks
+    npm ci --ignore-scripts
+  displayName: 'Npm ci (axios)'