Refactor Azure pipeline to use 'PullRequestAgentSecrets' variable group and improve step organization

Author: ChgoChad

.azdo/azure-pipeline.yaml

@@ -7,55 +7,61 @@ pool:
   name: '<value>'
 
 variables:
-- group: 'Claude-Code'
+- group: 'PullRequestAgentSecrets' # Variable group containing secrets like ANTHROPIC_API_KEY
 
-steps:
-- task: Docker@2
-  displayName: 'Run Pull Request Review'
-  inputs:
-    containerRegistry: $(DOCKER_SERVICECONNECTION_NAME)
-    command: 'run'
-    arguments: >-
-      --name pr-agent-container
-      -e ANTHROPIC_API_KEY=$(ANTHROPIC_API_KEY)
-      -v $(Build.SourcesDirectory):/sources
-      -v $(Build.ArtifactStagingDirectory)/output:/output
-      $(ACR_NAME).azurecr.io/ado/pullrequestagent:latest
-      --ado-token $(System.AccessToken)
-      --pull-request-id $(System.PullRequest.PullRequestId)
-      --organization-name $(ADO_ORGANIZATION_NAME)
-      --project-name "$(System.TeamProject)"
-      --repository-name "$(Build.Repository.Name)"
-      --model $(MODEL_NAME)
-      --sources-directory /sources
-      --output-directory /output
-  env:
-    SYSTEM_ACCESSTOKEN: $(System.AccessToken)
+stages:
+  - stage: Build
+    displayName: 'Run Pull Request Code Review Agent'
+    jobs:
+      - job: PullRequestReview
+        displayName: 'Run Pull Request Code Review Agent'
+        steps:
+        - task: Docker@2
+          displayName: 'Run Pull Request Review'
+          inputs:
+            containerRegistry: $(DOCKER_SERVICECONNECTION_NAME)
+            command: 'run'
+            arguments: >-
+              --name pr-agent-container
+              -e ANTHROPIC_API_KEY=$(ANTHROPIC_API_KEY)
+              -v $(Build.SourcesDirectory):/sources
+              -v $(Build.ArtifactStagingDirectory)/output:/output
+              $(ACR_NAME).azurecr.io/ado/pullrequestagent:latest
+              --ado-token $(System.AccessToken)
+              --pull-request-id $(System.PullRequest.PullRequestId)
+              --organization-name $(ADO_ORGANIZATION_NAME)
+              --project-name "$(System.TeamProject)"
+              --repository-name "$(Build.Repository.Name)"
+              --model $(MODEL_NAME)
+              --sources-directory /sources
+              --output-directory /output
+          env:
+            SYSTEM_ACCESSTOKEN: $(System.AccessToken)
 
-- task: PublishPipelineArtifact@1
-  displayName: 'Publish review artifact'
-  inputs:
-    targetPath: '$(Build.ArtifactStagingDirectory)/output'
-    artifact: 'PullRequestReview'
+        - task: PublishPipelineArtifact@1
+          displayName: 'Publish review artifact'
+          inputs:
+            targetPath: '$(Build.ArtifactStagingDirectory)/output'
+            artifact: 'PullRequestReview'
 
-- powershell: |
-    $summaryFile = "$(Build.ArtifactStagingDirectory)/output/review/code_review_summary.md"
-    if (Test-Path $summaryFile) {
-      $reviewFile = $summaryFile
-    } else {
-      $reviewFile = "$(Build.ArtifactStagingDirectory)/output/review/code_review.md"
-    }
-    $content = Get-Content -Path $reviewFile -Raw
-    $body = @{
-      comments = @(@{ parentCommentId = 0; content = $content; commentType = 1 })
-      status = 1
-    } | ConvertTo-Json -Depth 3
-    $uri = "$(System.CollectionUri)$(System.TeamProject)/_apis/git/repositories/$(Build.Repository.Name)/pullRequests/$(System.PullRequest.PullRequestId)/threads?api-version=7.1"
-    $headers = @{
-      Authorization  = "Bearer $(System.AccessToken)"
-      'Content-Type' = "application/json"
-    }
-    Invoke-RestMethod -Uri $uri -Method Post -Headers $headers -Body ([System.Text.Encoding]::UTF8.GetBytes($body)) -ContentType "application/json"
-  displayName: 'Post review as PR comment'
-  env:
-    SYSTEM_ACCESSTOKEN: $(System.AccessToken)
+        - powershell: |
+            $summaryFile = "$(Build.ArtifactStagingDirectory)/output/review/code_review_summary.md"
+            if (Test-Path $summaryFile) {
+              $reviewFile = $summaryFile
+            } else {
+              $reviewFile = "$(Build.ArtifactStagingDirectory)/output/review/code_review.md"
+            }
+            $content = Get-Content -Path $reviewFile -Raw
+            $body = @{
+              comments = @(@{ parentCommentId = 0; content = $content; commentType = 1 })
+              status = 1
+            } | ConvertTo-Json -Depth 3
+            $uri = "$(System.CollectionUri)$(System.TeamProject)/_apis/git/repositories/$(Build.Repository.Name)/pullRequests/$(System.PullRequest.PullRequestId)/threads?api-version=7.1"
+            $headers = @{
+              Authorization  = "Bearer $(System.AccessToken)"
+              'Content-Type' = "application/json"
+            }
+            Invoke-RestMethod -Uri $uri -Method Post -Headers $headers -Body ([System.Text.Encoding]::UTF8.GetBytes($body)) -ContentType "application/json"
+          displayName: 'Post review as PR comment'
+          env:
+            SYSTEM_ACCESSTOKEN: $(System.AccessToken)