Update publish as a deployment job (#2333)

To use environments:
https://learn.microsoft.com/en-us/azure/devops/pipelines/process/deployment-jobs?view=azure-devops
and
https://learn.microsoft.com/en-us/azure/devops/pipelines/process/environments?view=azure-devops#target-an-environment-from-a-deployment-job

Author: justinchuby

.azure-pipelines/publish.yml

@@ -9,25 +9,28 @@ stages:
 - stage: Release
   dependsOn: []
   jobs:
-  - job: onnxscript_publish
+  - deployment: onnxscript_publish
     environment:
       name: 'onnxscript-release'
     pool:
       vmImage: 'ubuntu-latest'
-    steps:
-    - download: onnxscript-release
-      artifact: drop
-    - task: EsrpRelease@9
-      displayName: 'ESRP Release'
-      inputs:
-        connectedservicename: esrp_release
-        keyvaultname: 'ortbuildkeyvault'
-        signcertname: 'esrpcodesign'
-        clientid: '53d54d02-978d-4305-8572-583cf6711c4f'
-        contenttype: PyPi
-        folderlocation: '$(Pipeline.Workspace)/onnxscript-release/drop'
-        owners: '[email protected]'
-        approvers: '[email protected]'
-        mainpublisher: AIFrameworks
-        usemanagedidentity: true
-        domaintenantid: '975f013f-7f24-47e8-a7d3-abc4752bf346'
+    strategy:
+      runOnce:
+        deploy:
+          steps:
+          - download: onnxscript-release
+            artifact: drop
+          - task: EsrpRelease@9
+            displayName: 'ESRP Release'
+            inputs:
+              connectedservicename: esrp_release
+              keyvaultname: 'ortbuildkeyvault'
+              signcertname: 'esrpcodesign'
+              clientid: '53d54d02-978d-4305-8572-583cf6711c4f'
+              contenttype: PyPi
+              folderlocation: '$(Pipeline.Workspace)/onnxscript-release/drop'
+              owners: '[email protected]'
+              approvers: '[email protected]'
+              mainpublisher: AIFrameworks
+              usemanagedidentity: true
+              domaintenantid: '975f013f-7f24-47e8-a7d3-abc4752bf346'