Deduplicating how we parse metadata and create .zip archives in Helix SDK (debt from #7811)

…et/sourcelink mono/linker dotnet/xharness (#7834)

[main] Update dependencies from dotnet/xliff-tasks dotnet/arcade dotnet/sourcelink mono/linker dotnet/xharness

* Fix sourcelink repository url

When we updated the ScmRepositoryUrl to handle devdiv links, we never updated the version used in SourceRoot, which is used by sourcelink, and also needed to be updated to remove -trusted from the link. By not removing -trusted, the translation pattern can't identify the url as something that needs to be translated, and so just uses the azdo url. This change adds the code to remove -trusted to fix the issue.

* Remove second item group

#7833)

* Add ProductVersion.txt support where possible; get the version of the inner package from productVersion.txt, NOT from the specified version.  Allows "non-stable" outer container with "stable" inner contents

#7836

…ting (#7852)

[main] Update dependencies from dotnet/arcade dotnet/sourcelink

…903.15 (#7839)

[main] Update dependencies from dotnet/roslyn

The bundle was passing in a hardcoded DOTNETHOME value unconditionally
to MSIs in the chain.  This value doesn't have the redirection we're
adding to the MSI.  We can't add that redirection in the bundle, since
Burn doesn't have conditional variables.  It can only set variables as a
result of a search to either the value of the search (if successful) or
1/0.

The changes in 7168d63 did fix Android msi generation issues for me
locally, but CI attempts have still been failing.  A new `RunInParallel`
task parameter has been added to allow consumers to opt-out of most
parallelization until these issues are fixed.

* Originally didn't fix it in both places, but also using [MSBuild]::ValueOrDefault() API
* PR feedback: No longer need '%(SourceRoot.ScmRepositoryUrl)' != ''  when using ValueOrDefault

#7873

#7872)