fix: code sign validation for setuptools

[hallvictoria]

Description

For Windows builds, .exe files brought by setuptools didn't have signing certificates. The recommended template for ESRP signing doesn't work with .exe files. However, since setuptools is only brought by pyproject.toml to build the worker, it doesn't need to be brought as a worker dependency. This excludes setuptools from being part of the published worker artifact.

Failing pipeline due to signing (internal only)
Passing pipeline with these changes (internal only)

• enable code sign validation for the official build
  • ESRP signing isn't needed for the public build or any of the test pipelines
  • official build will fail if any other artifact files fail to be signed correctly
• excludes setuptools from being packaged as part of the worker
  • excludes the setuptools directory and dist

Fixes #

---

PR information

• The title of the PR is clear and informative.
• There are a small number of commits, each of which has an informative message. This means that previously merged commits do not appear in the history of the PR. For information on cleaning up the commits in your pull request, see this page.
• If applicable, the PR references the bug/issue that it fixes in the description.
• New Unit tests were added for the changes made and CI is passing.

Quality of Code and Contribution Guidelines

• I have read the contribution guidelines.