Microsoft's NuGet packages get a new author-signing certificate on Sept 23

Trusted-signer policies pinned to the old Microsoft certificate fingerprint will start failing with NU3034 -- add the new fingerprint via dotnet nuget trust before your CI hits it.