A team wants a managed package feed that can serve internal packages and approved external dependencies through upstream sources. Which Azure DevOps capability fits?

1. A release-note Markdown file
2. A branch protection rule only
3. Azure Artifacts
4. Azure Boards work items only