Backport of auditSources fix

[NikolaMilosavljevic]

Backport of #42740

release/9.0.1xx branch does not have the fix for dotnet/source-build#4548. See dotnet/source-build#4558

Nuget.client introduced source auditing with #42658, see NuGet/NuGet.Client#5939

This breaks source build, offline legs, as we do not use any online sources in those scenarios, and do not have internet access.

[ViktorHofer]

I think this PR can now be closed as #42826 already got merged into RC1 and sdk has a inner branch port bot.

[NikolaMilosavljevic]

I think this PR can now be closed as #42826 already got merged into RC1 and sdk has a inner branch port bot.

Yeah - I was just commenting on the other PR. Change in rc1 would flow up.

[ellahathaway]

This change still hasn't flowed to 9.0. Do have a general timeframe for when we can expect a flow?

[ViktorHofer]

This change still hasn't flowed to 9.0. Do have a general timeframe for when we can expect a flow?

@marcpopMSFT do rc1 changes not flow into 9.0.1xx via the merge bot?

[marcpopMSFT]

Changes in the SDK repo do not automatically flow from the preview/rc branches into the mainline branches. Any change made directly to the rc1 branch will need to be backported out so this PR is still required.

[NikolaMilosavljevic]

@ViktorHofer @ellahathaway @marcpopMSFT we need a review of this PR before it can be merged.