Address publish pipeline review feedback

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

Author: Copilot

common/config/azure-pipelines/esrp-publish-rush.yaml

@@ -57,6 +57,7 @@ extends:
     stages:
       - template: /common/config/azure-pipelines/templates/esrp-publish-stages.yaml@self
         parameters:
+          # https://dev.azure.com/RushStack/GitHubProjects/_build?definitionId=12
           BumpPipelineId: 12
           BumpPipelineProject: GitHubProjects
           StageNameSuffix: Rush

common/config/azure-pipelines/esrp-publish-rushstack.yaml

@@ -57,6 +57,7 @@ extends:
     stages:
       - template: /common/config/azure-pipelines/templates/esrp-publish-stages.yaml@self
         parameters:
+          # https://dev.azure.com/RushStack/GitHubProjects/_build?definitionId=10
           BumpPipelineId: 10
           BumpPipelineProject: GitHubProjects
           StageNameSuffix: Rushstack

libraries/rush-lib/assets/rush-init/common/config/rush/[dot]npmrc

@@ -18,7 +18,16 @@
 # It is NOT recommended to store authentication tokens in a text file on a lab machine, because
 # other unrelated processes may be able to read that file.  Also, the file may persist indefinitely,
 # for example if the machine loses power.  A safer practice is to pass the token via an
-# environment variable, which can be referenced from .npmrc using ${} expansion.
+# environment variable, which can be referenced from .npmrc using ${} expansion.  For example:
+#
+#   //registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}
+#
+
+# Explicitly specify the NPM registry that "rush install" and "rush update" will use by default:
+registry=https://registry.npmjs.org/
+
+# Optionally provide an authentication token for the above registry URL (if it is a private registry):
+# //registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}
 
 # Change this to "true" if your registry requires authentication for read-only operations:
 always-auth=false

libraries/rush-lib/assets/rush-init/common/config/rush/[dot]npmrc-publish

@@ -14,4 +14,13 @@
 # It is NOT recommended to store authentication tokens in a text file on a lab machine, because
 # other unrelated processes may be able to read the file.  Also, the file may persist indefinitely,
 # for example if the machine loses power.  A safer practice is to pass the token via an
-# environment variable, which can be referenced from .npmrc using ${} expansion.
+# environment variable, which can be referenced from .npmrc using ${} expansion.  For example:
+#
+#   //registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}
+#
+
+# Explicitly specify the NPM registry that "rush publish" will use by default:
+registry=https://registry.npmjs.org/
+
+# Provide an authentication token for the above registry URL:
+# //registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}