build: bump SourceLink and Test SDK past vulnerable dependencies

Microsoft.SourceLink.GitHub 8.0.0 pulled in Microsoft.Build.Tasks.Git
8.0.0 (GHSA-23fw-v26w-5fgq, moderate). Microsoft.NET.Test.Sdk 16.11.0
pulled in Newtonsoft.Json 9.0.1 (GHSA-5crp-9r3c-p9vr, high).
dotnet list package --vulnerable now reports none.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: bielu

Directory.Packages.props

@@ -10,15 +10,15 @@
   </ItemGroup>
 
   <ItemGroup Label="Build">
-    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="8.0.0" />
+    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.401" />
     <PackageVersion Include="StyleCop.Analyzers" Version="1.2.0-beta.556" />
   </ItemGroup>
 
   <ItemGroup Label="Test">
     <PackageVersion Include="coverlet.collector" Version="3.1.2" />
     <PackageVersion Include="FluentAssertions" Version="7.0.0" />
     <PackageVersion Include="LiquidTestReports.Markdown" Version="1.0.9" />
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="16.11.0" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageVersion Include="NUnit" Version="3.13.2" />
     <PackageVersion Include="NUnit3TestAdapter" Version="4.0.0" />
     <PackageVersion Include="ReportGenerator" Version="5.1.2" />