Fix symbol-publish gate in build-all-lib.yml to use a branch allowlist (#4960)

Author: tlmii

eng/pipelines/build-all-lib.yml

@@ -182,11 +182,11 @@ extends:
 
         # Stage shipping binaries for symbol upload BEFORE the test step;
         # see publish-symbols-stage.yml for why this must run pre-test.
-        # Pipeline only triggers on v* tags, but condition is explicit so
-        # a manual queue against a branch does not unintentionally upload.
+        # Symbols publish from the branches we ship from (main/dev/dev-v5/archives/*),
+        # whether the run is queued manually or via the declared tag trigger.
         - template: /eng/pipelines/publish-symbols-stage.yml@self
           parameters:
-            condition: and(succeeded(), startsWith(variables['Build.SourceBranch'], 'refs/tags/v'))
+            condition: and(succeeded(), or(in(variables['Build.SourceBranch'], 'refs/heads/main', 'refs/heads/dev', 'refs/heads/dev-v5'), startsWith(variables['Build.SourceBranch'], 'refs/heads/archives/'), startsWith(variables['Build.SourceBranch'], 'refs/tags/v')))
 
         # Test and generate Code Coverage
         - task: DotNetCoreCLI@2
@@ -225,7 +225,7 @@ extends:
 
         - template: /eng/pipelines/publish-symbols-upload.yml@self
           parameters:
-            condition: and(succeeded(), startsWith(variables['Build.SourceBranch'], 'refs/tags/v'))
+            condition: and(succeeded(), or(in(variables['Build.SourceBranch'], 'refs/heads/main', 'refs/heads/dev', 'refs/heads/dev-v5'), startsWith(variables['Build.SourceBranch'], 'refs/heads/archives/'), startsWith(variables['Build.SourceBranch'], 'refs/tags/v')))
 
         # Since NuGet packages are generated during the build, we need to copy them to the artifacts folder.
         - task: CopyFiles@2