Target the v2.0 rebase-action template

.github/workflows/rebase-trigger.yml

@@ -5,7 +5,7 @@ on:
     types: [created]
 
 jobs:
-  launchBackportBuild:
+  setupRebase:
     runs-on: ubuntu-latest
     # GITHUB_TOKEN change from read-write to read-only on 2024-02-01 requires permissions block
     # https://docs.opensource.microsoft.com/github/apps/permission-changes/
@@ -15,15 +15,35 @@ jobs:
       contents: read
       security-events: write
     if: github.event.issue.pull_request != '' && contains(github.event.comment.body, '@gitbot rebase')
-
     steps:
-      - uses: xamarin/[email protected]
-        with:
-          pull_request_url: ${{ github.event.issue.pull_request.url }}
-          comment_author: ${{ github.actor }}
-          github_repository: ${{ github.repository }}
-          ado_organization: ${{ secrets.ADO_PROJECTCOLLECTION }}
-          ado_project: ${{ secrets.ADO_PROJECT }}
-          rebase_pipeline_id: 13926
-          ado_build_pat: ${{ secrets.ADO_BUILDPAT }}
-          github_account_pat: ${{ secrets.SERVICEACCOUNT_PAT }}
+      - name: Show Comment
+        shell: pwsh
+        id: show_comment
+        run: |
+          Write-Host "Comment: ${env:COMMENT}"
+        env:
+          COMMENT: "${{ github.event.comment.body }}"
+
+  launchRebaseBuild:
+    needs: setupRebase
+    uses: xamarin/rebase-bot-action/.github/workflows/[email protected]
+    # GITHUB_TOKEN change from read-write to read-only on 2024-02-01 requires permissions block
+    # https://docs.opensource.microsoft.com/github/apps/permission-changes/
+    # https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
+    permissions:
+      actions: write
+      contents: read
+      security-events: write
+      id-token: write           # The rebase-action template being invoked requires this permission
+    with:
+      pull_request_url: ${{ github.event.issue.pull_request.url }}
+      comment_author: ${{ github.actor }}
+      github_repository: ${{ github.repository }}
+    secrets:
+      azure_tenant_id: ${{ secrets.REBASE_AZURE_TENANT_ID }}
+      azure_subscription_id: ${{ secrets.REBASE_AZURE_SUBSCRIPTION_ID }}
+      azure_client_id: ${{ secrets.REBASE_AZURE_CLIENT_ID }}
+      ado_organization: ${{ secrets.ADO_PROJECTCOLLECTION }}
+      ado_project: ${{ secrets.ADO_PROJECT }}
+      rebase_pipeline_id: ${{ secrets.REBASE_PIPELINEID }}
+      github_account_pat: ${{ secrets.SERVICEACCOUNT_PAT }}