Develop process to validate SDK does not include any vulnerable components

A validation process is needed to ensure the SDK does not include any vulnerable components. This includes pre-disclosed vulnerabilities. See https://github.com/dotnet/dotnet-docker/issues/5325 and https://github.com/dotnet/sdk/issues/30659 for the background and how these may be "false positives". This validation should be automated and run as part of CI to ensure the SDK is in a clean state prior to shipping.