docs: move to docker secret mount for passing in pat token

[embetten]

#655

• Migrate sample to use secret mounts instead of args https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
• remove session token cache env variable - this should never be used if the env variables VSS_NUGET_URI_PREFIXES/VSS_NUGET_ACCESSTOKEN or _endpoints are set
• moved to VSS_NUGET_ACCESSTOKEN/VSS_NUGET_URI_PREFIXES to further simplify

[jpinz]

I think that looks fine, I would suggest testing it and then doing a docker inspect to confirm there's no leaks.
If you'd like, you can also build it, then save as a tarball and send it to me (over teams or email) and I can inspect it.

[embetten]

I think that looks fine, I would suggest testing it and then doing a docker inspect to confirm there's no leaks. If you'd like, you can also build it, then save as a tarball and send it to me (over teams or email) and I can inspect it.

Done! also moved the config values to export in the same RJN command as well. This will be more annoying for users that need to run multiple build and restore commands, but will ensure none of the config settings are persisted in the image either.

[embetten]

/azp run

[azure-pipelines]

No pipelines are associated with this pull request.