Use of public package feeds instead of CFS

[mthalman]

The SBRP pipeline is connecting to public package feeds instead of using central feed services (CFS). Specifically, the domain being connected to is api.nuget.org. See https://aka.ms/1es/netiso/CFS for instruction on how to resolve.

[mthalman]

This is not fixed. Reporting on latest builds show that api.nuget.org is still being hit.

[akoeplinger]

I still see the auditSources at least on release/10.0 so it might be from there, or at least it needs to be fixed as well

[akoeplinger]

I took a look at the Kusto data and all the recent findings were from release/10.0 so #1458 will address it