Analyzer for redundant NuGet packages

[KirillOsenkov]

SDK has been moving some NuGet references in the box, such as Microsoft.NetFramework.ReferenceAssemblies or Microsoft.SourceLink.AzureRepos.Git (etc)

If a codebase has an explicit package reference to, say, Microsoft.SourceLink.AzureRepos.Git 1.0.0, it will inherit an older version, that has this bug: dotnet/sdk#37027

Would be nice to have an analyzer that detects this and suggests to remove an explicit reference, so that the built-in version takes precedence (that no longer has this bug)

[AR-May]

Team triage: This is a good idea, ideally this would be a custom analyzer in sdk.

[baronfel]

Agree with @AR-May - we should transfer to dotnet/SDK and apply the 'msbuild-analyzer-candidate' label.