[npm-post-publish] Update plugins autoinstaller lockfile before rush update (#5763)

The bump-decoupled-local-dependencies step can update the plugins
autoinstaller's package.json, causing rush update to fail with
ERR_PNPM_OUTDATED_LOCKFILE because the lockfile is stale. Fix by
running rush update-autoinstaller --name plugins first.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: iclanton

common/config/azure-pipelines/npm-post-publish.yaml

@@ -136,13 +136,13 @@ extends:
 
               - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
                 parameters:
-                  Arguments: 'update'
-                  DisplayName: 'Rush Update'
+                  Arguments: 'update-autoinstaller --name plugins'
+                  DisplayName: 'Rush Update Autoinstaller (plugins)'
 
               - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
                 parameters:
-                  Arguments: 'update-autoinstaller --name plugins'
-                  DisplayName: 'Rush Update Autoinstaller (plugins)'
+                  Arguments: 'update'
+                  DisplayName: 'Rush Update'
 
               - bash: |
                   set -e