release: enable TSA and remove our baselines file

[DHowett]

There are two ways to handle policy (binskim, policheck, etc.) failure: put them in one giant JSON file full of hashes, or let an internal process called "TSA" turn them into bugs.

This pull request moves us from the former to the latter.