Add root nuget.config to ensure CFS protection