Dependencies: Update Microsoft packages to 10.0.1 and pin vulnerable transitive dependencies (closes #21122)

[AndyButland]

Description

Although I can't see evidence for this myself - e.g. via dotnet list package --include-transitive --vulnerable or through Visual Studio tools - it can be reported that some of our transitive dependencies have security vulnerabilities. See #21122.

We removed some direct dependencies we listed for Umbraco 17 in #20385, but seems we should have kept them. So I've added them back in this PR.

I've also taken the opportunity to bump Microsoft's 10.0.0 dependencies to the latest patch of 10.0.1.

Change Summary

• Enables CentralPackageTransitivePinningEnabled in Directory.Packages.props to allow pinning transitive dependency versions
• Updates Microsoft packages from 10.0.0 to 10.0.1 patch versions (security and bug fixes)
• Adds explicit version pins for transitive dependencies with known vulnerabilities:
  • System.Net.Http 4.3.4 (via Dazinator.Extensions.FileProviders)
  • System.Private.Uri 4.3.2 (via Dazinator.Extensions.FileProviders)
  • System.Text.RegularExpressions 4.3.1 (via Markdown)

[Copilot]

Pull request overview

This PR updates Microsoft package dependencies from version 10.0.0 to 10.0.1 and implements transitive dependency pinning to address security vulnerabilities. The changes enable CentralPackageTransitivePinningEnabled in the build configuration and explicitly pin vulnerable transitive dependencies to their patched versions.

Key changes:

• Enables central package transitive pinning capability in MSBuild
• Updates all Microsoft.* and System.* packages from 10.0.0 to 10.0.1 (patch release for .NET 10)
• Pins three transitive dependencies to address known security vulnerabilities

[Zeegaan]

Looks good to me 💪
Just a question here, do we need a todo to remove the pinning again ? 🤔
I guess we won't need this if/when we remove the Dazzinator dependency 😅

[AndyButland]

Good call - I've added TODOs along with a version number when I think it'll make sense to remove these dependencies.