…0725.2 (#2167)

[main] Update dependencies from dotnet/runtime

Bump sdk version in global.json
Fix new analyzer recommendations about AsSpan and Contains(char)
Disable ImplicitNamespaceImports
Update Microsoft.NetCore.App.Ref used by analyzer to take new Runtime attribute changes
Update analyzer to not use Message as a property in RequiresAssemblyFilesAttribute
Update cecil to use Microsoft.NETFramework.ReferenceAssemblies.net40 1.0.2 along with taking other cecil updates

* Check attribute suppressions lazily

Previously attribute suppressions were populated while marking
the attributes. This meant that any suppression checks before the
attributes got marked would not see the suppressions. Doing this
lazily fixes the problem, but may result in scanning the attributes
multiple times.

Fixes #2163
FIxes #2095

This also fixes an issue where we were not respecting
UnconditionalSuppressMessageAttribute injected via
XML for anything other than assembly/module level attributes.

* Fix formatting

* PR feedback

- Make helper private

* Add test for compiler generated code in copy assembly

* Bump cecil package version

The submodule update in #2156
incremented the cecil version, but we were still using 0.11.3 as the version
in our package graph. See #1515 for more
context on how this is set up.

Fixes #2173

* Remove unnecessary cast