Add secret management build part (#7713)

.config/dotnet-tools.json

@@ -0,0 +1,12 @@
+{
+  "version": 1,
+  "isRoot": true,
+  "tools": {
+    "microsoft.dnceng.secretmanager": {
+      "version": "1.1.0-beta.21380.2",
+      "commands": [
+        "secret-manager"
+      ]
+    }
+  }
+}

azure-pipelines-weekly.yaml

@@ -0,0 +1,36 @@
+schedules:
+- cron: 0 12 * * 1
+  displayName: Weekly Monday build
+  branches:
+    include:
+    - main
+  always: true
+
+name: $(Date:yyyMMdd)$(Rev:rr)
+stages:
+  - stage: SynchronizeSecrets
+    jobs:
+    - job: Synchronize
+      pool:
+        vmImage: windows-2019
+      steps:
+      - task: UseDotNet@2
+        displayName: Install Correct .NET Version
+        inputs:
+          useGlobalJson: true
+
+      - task: UseDotNet@2
+        displayName: Install .NET 3.1 runtime
+        inputs:
+          packageType: runtime
+          version: 3.1.x
+
+      - script: dotnet tool restore
+
+      - task: AzureCLI@2
+        inputs:
+          azureSubscription: DotNet Eng Services Secret Manager
+          scriptType: ps
+          scriptLocation: inlineScript
+          inlineScript: |
+            Get-ChildItem .vault-config/*.yaml |% { dotnet secret-manager synchronize $_}