Build fails after automatic ubuntu-latest image update in Azure DevOps pipeline
Goal: ensure that a pipeline that passes on a developer's machine continues to pass in production without unexpected failures due to agent image updates. Constraint: the `vmImage: 'ubuntu-latest'` alias resolves to the newest Microsoft-hosted image at queue time, which may introduce newer runtimes or removed tools, while pinning to an explicit version such a