build: resolve vulnerable SourceLink dependency

[Copilot]

The test-windows job stopped during restore, before tests ran: Microsoft.SourceLink.GitHub 8.0.0 pulled in vulnerable Microsoft.Build.Tasks.Git 8.0.0, and NuGet treated advisory NU1902 as an error.

• Dependency: Update the global SourceLink reference to 10.0.303, which resolves the patched Microsoft.Build.Tasks.Git 10.0.303.
• Lockfile: Refresh the NativeAOT package lockfile to reflect the updated dependency graph.

[cursor]

PR Summary

Low Risk
Build-time and SourceLink-only dependency bumps with no runtime product code changes; main risk is CI restore/build behavior on updated tooling versions.

Overview
Bumps the repo-wide Microsoft.SourceLink.GitHub global package reference from 8.0.0 to 10.0.303 in Directory.Packages.props, so restores no longer pull vulnerable Microsoft.Build.Tasks.Git 8.0.0 (which was failing NU1902 and blocking test-windows before tests ran).

Refreshes tests/SingleStoreConnector.NativeAot.Tests/packages.lock.json to match: SourceLink and its transitives move to 10.0.303 (including new System.IO.Hashing 10.0.11), ILCompiler/ILLink versions are bumped for net8.0 and net10.0, and linux-x64 RID-specific ILCompiler entries are added.

^{Reviewed by Cursor Bugbot for commit e80f281. Configure here.}