Re-bootstrap pipeline should enforce signed builds

[MichaelSimons]

By default the re-bootstrap pipeline should fail if the target build is not signed. There should be a mechanism to override this functionality.

[MichaelSimons]

Fixed with https://dev.azure.com/dnceng/internal/_git/dotnet-release/pullrequest/51875