feat(ir): add typed builder for Maven@3

[github-actions]

Summary

Adds a typed builder struct for Maven@3 to the ado-aw IR.

Motivation

Previously, any code that needed to emit a Maven build step had to hand-craft
TaskStep::new("Maven@3", ...) with raw string input keys. This PR introduces
a typed builder struct (new(maven_pom_file) + typed optional setters +
into_step()) so the POM-file path is positional, all optional inputs and
their constrained values are type-checked, and call sites stop using
stringly-typed keys.

Three typed enums make constrained values unrepresentable with wrong strings:

• CodeCoverageTool — None | Cobertura | JaCoCo
• JdkVersion — Default | V21 | V17 | V11 | V10 | V9 | V8 | V7 | V6
• JdkArchitecture — X86 | X64 | Arm64

Changes

• src/compile/ir/tasks/maven.rs: new Maven builder struct with typed enums
  and 12 #[cfg(test)] unit tests covering all input groups
• src/compile/ir/tasks/mod.rs: pub mod maven; declaration (alphabetical)

ADO Task Reference

• Task: Maven@3
• Docs: (https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/maven-v3)
• Required inputs: mavenPOMFile
• Optional inputs: goals, options, publishJUnitResults, testResultsFiles,
  testRunTitle, allowBrokenSymlinks, codeCoverageToolOption,
  codeCoverageClassFilter, codeCoverageClassFilesDirectories,
  codeCoverageSourceDirectories, codeCoverageFailIfEmpty,
  codeCoverageRestoreOriginalPomXml, jdkVersionOption,
  jdkArchitectureOption, mavenOptions, mavenAuthenticateFeed,
  checkStyleRunAnalysis, pmdRunAnalysis, spotBugsRunAnalysis

Validation

• cargo build --all-targets
• cargo test — 12 new unit tests, all pass, no existing tests broken
• cargo clippy --all-targets --all-features --workspace -- -D warnings

---

Created by the ado-task-ir-contributor workflow.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• spsprodeus21.vssps.visualstudio.com
• spsprodweu4.vssps.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "spsprodeus21.vssps.visualstudio.com"
    - "spsprodweu4.vssps.visualstudio.com"

See Network Configuration for more information.

Generated by ADO Task IR Contributor · 969.1 AIC · ⌖ 44.7 AIC · ⊞ 38.1K · ◷

[jamesadevine]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Done. The only conflict was in src/compile/ir/tasks/mod.rs — main had added go_tool, java_tool_installer, and maven_authenticate while this branch added maven. Merged them all in alphabetical order. Build passes.