Remove dependency on NuGet.CommandLine from C# build

[iamcarbon]

Describe the bug

NuGet.CommandLine has a critical vulnerability, and should not be included in the release build.

Expected behavior
Library does not reference unused libraries with a critical vulnerability.

[justin-mellor]

If you are not able to remove the package reference (though assume it is purely a development dependency)

Can you at least push the version to 5.11.6 or above which fixes the CVE
https://www.cve.org/CVERecord?id=CVE-2024-0057

[justin-mellor]

@MichaelMWW is there any chance of getting this reported critical security vulnerability fixed?