security: upgrades nerdbank message pack version

[Vincent Biret (baywet)]

closes#1415
fixes#1426
due to this advisory, restores are failing on a bunch of projects. GHSA-2cwq-pwfr-wcw3
This pull request upgrade the dependency in an attempt to release and fix the issue.
However I was not able to test things out locally since https://dev.azure.com/azure-public/vside/_artifacts/feed/msft_consumption_public does not have that specific version, and I couldn't figure out how to get the permissions to do so.
Nuking the nuget config locally results in quite a few unit tests failing. Not sure how to proceed from there?

[Copilot]

Pull request overview

This PR updates the centrally-managed NuGet dependency version for Nerdbank.MessagePack to address the security advisory referenced in the PR description and unblock restores that are failing due to the vulnerable version.

Changes:

• Bump Nerdbank.MessagePack from 1.0.11 to 1.1.62 via central package management.

[Andrew Arnott (AArnott)]

Thanks for volunteering this. We'll go with #1430 instead of this PR because this PR targets an unreleased version and you probably want a release sooner rather than later.

That said, you can workaround this locally by adding a direct reference to the Nerdbank.MessagePack package yourself, or if you're using CPVM, just add a PackageVersion item to Directory.Packages.props to the same dependency (and turn on transitive pinning).