Update OneLocBuild process (#622)

* fix onelocbuild

* use variables

jobs/loc/TranslationsImportExport.yml

@@ -63,6 +63,19 @@ extends:
                 inputs:
                   script: "yarn run translations-export"
 
+              # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-security-configuration/configuration-guides/pat-burndown-guidance#authentication-from-pipelines
+              # Requires Azure client 2.x
+              - task: AzureCLI@2
+                displayName: "Set OneLocBuildToken"
+                enabled: true
+                inputs:
+                  azureSubscription: "$(AzureSubscription)" # Azure DevOps service connection
+                  scriptType: "pscore"
+                  scriptLocation: "inlineScript"
+                  inlineScript: |
+                    $token = az account get-access-token --query accessToken --resource $(AzureGuid) -o tsv
+                    Write-Host "##vso[task.setvariable variable=AzDO.OneLocBuildToken;issecret=true]${token}"
+
               - task: OneLocBuild@2
                 env:
                   SYSTEM_ACCESSTOKEN: $(System.AccessToken)
@@ -72,7 +85,7 @@ extends:
                   isCreatePrSelected: false
                   prSourceBranchPrefix: "locfiles"
                   packageSourceAuth: "patAuth"
-                  patVariable: "$(OneLocBuildPat)"
+                  patVariable: "$(AzDO.OneLocBuildToken)"
                   LclSource: lclFilesfromPackage
                   LclPackageId: "LCL-JUNO-PROD-VMAKEFILE"
                   lsBuildXLocPackageVersion: "7.0.30510"