CI: fetch secrets from Azure

[thresheek]

No description provided.

[route443]

It looks like with a prod lic we need to either change permissions on the state dir or add something like:

mgmt {
    ...
    state_path ${\$t->testdir()};
}

with the TEST_GLOBALS

[thresheek]

That error should probably be fixed in a separate PR

[route443]

That error should probably be fixed in a separate PR

Agree