Utilize CentralPackageTransitivePinningEnabled

[Kielek]

We probably can define <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled> on root level and have safe set of assemblies be defined in one place at root, not requiring us to add transitive package reference every time we need to change version.
We will still be able to override versions downlevel on needed basis.

Originally posted by @iskiselev in #4999 (comment)

[martincostello]

One thing to watch with this is you might need to still use conditions - I found (the hard way) that if you just override the version once, it'll apply to all TFMs and all transitive dependencies, which can accidentally raise versions you didn't intend to.