ci: install dotnet v10 (#10937)

A new version of the `AzureSignTool` appears to require a dotnet version that is not yet installed on the GitHub runners. Ideally we would be managing this via `.tool-versions` but that needs a bit more work, see the CI failures in #10936.

.github/actions/setup-azure-sign-tool/action.yml

@@ -0,0 +1,13 @@
+name: "Setup AzureSignTool"
+description: "Installs the AzureSignTool"
+runs:
+  using: "composite"
+  steps:
+    - uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+      if: ${{ runner.os == 'Windows' }}
+      with:
+        dotnet-version: "10.0.x"
+    - name: Install AzureSignTool
+      if: ${{ runner.os == 'Windows' }}
+      shell: bash
+      run: dotnet tool install --global AzureSignTool

.github/workflows/_data-plane.yml

@@ -139,9 +139,7 @@ jobs:
 
           cargo build $PROFILE -p ${{ matrix.package }} --target ${{ matrix.target }}
           mv target/${{ matrix.target }}/${{ inputs.profile }}/${{ matrix.package }}.exe "$ARTIFACT_PATH"
-      - name: Install AzureSignTool
-        shell: bash
-        run: dotnet tool install --global AzureSignTool
+      - uses: ./.github/actions/setup-azure-sign-tool
       - name: Sign the binary
         shell: bash
         env:

.github/workflows/_tauri.yml

@@ -151,10 +151,7 @@ jobs:
           organization: firezone-inc
       - name: Install pnpm deps
         run: pnpm install
-      - name: Install AzureSignTool
-        if: ${{ runner.os == 'Windows' }}
-        shell: bash
-        run: dotnet tool install --global AzureSignTool
+      - uses: ./.github/actions/setup-azure-sign-tool
       - name: Build release exe and MSI / deb
         env:
           CARGO_PROFILE_RELEASE_LTO: thin # Fat LTO is getting too slow / RAM-hungry on Tauri builds