Enable CheckSdkVulnerabilities in .NET 11 CI, enforce NETSDK1238, NETSDK1239, and NETSDK1240, and avoid cache and global.json blind spots.
Audit the Configuration environment variable, pin every .NET CI command, and verify build, test, package, and publish handoffs before adopting .NET 11.
Make .NET 11 SDK container publishes reproducible with SOURCE_DATE_EPOCH, verify identical registry digests, and diagnose legitimate input drift.
