Nuget "project centric detector" should not filter out dependencies

The project-centric detector filters out [a large list of dependencies by name](https://github.com/microsoft/component-detection/blob/9a5fff2af0b0d0ccbd813433d1696bbed27929bc/src/Microsoft.ComponentDetection.Detectors/nuget/NuGetProjectModelProjectCentricComponentDetector.cs#L31-L185).

I think this should not be done because this filters out dependencies which have security advisories filed against them. For example, `System.Text.RegularExpressions` is filtered out, but has a High severity alert against it (https://github.com/advisories/GHSA-cmhx-cq75-c4mj) which is detected by `dotnet list --vulnerable`.