Fix packagesToPush escaping and add any-RID guard to package-unsigned validation

Co-authored-by: mkrueger <341098+mkrueger@users.noreply.github.com>
Agent-Logs-Url: https://github.com/Azure/CosmosDBShell/sessions/0e5944c6-6775-4f22-af50-756cb505882f

Author: Copilot

.github/workflows/package-unsigned.yml

@@ -170,6 +170,13 @@ jobs:
             exit 1
           }
 
+          $anyMatches = Get-ChildItem -Path (Join-Path $pkgDir 'CosmosDBShell.any.*.nupkg') -ErrorAction SilentlyContinue
+          if ($anyMatches -and $anyMatches.Count -gt 0) {
+            $names = $anyMatches | ForEach-Object { $_.Name } | Sort-Object
+            Write-Error "Unexpected any-RID package(s) found: $($names -join ', ')"
+            exit 1
+          }
+
       - name: Upload test results
         if: always()
         uses: actions/upload-artifact@v4

.pipelines/CosmosDB-Shell-Official.yml

@@ -518,7 +518,7 @@ extends:
                   eq('${{ parameters.publishNuget }}', 'true'))
                 inputs:
                   command: "push"
-                  packagesToPush: "$(Build.SourcesDirectory)\\out\\nupkg\\CosmosDBShell.$(CosmosDBShell_PackageVersion).nupkg"
+                  packagesToPush: "$(Build.SourcesDirectory)\out\nupkg\CosmosDBShell.$(CosmosDBShell_PackageVersion).nupkg"
                   nuGetFeedType: "internal"
                   publishVstsFeed: "CosmosDB/CosmosDBShell"
                   allowPackageConflicts: true