Reproducible and verifiable NativeAOT builds

[agocke]

Tracking issue for a variety of different build hygiene-related items for NativeAOT:

• Determinism for NativeAOT runtime#73931
• [NativeAOT] BinSkim - EnableControlFlowGuard runtime#83603
• BinSkim warnings from NativeAOT Linux binaries runtime#96848

[agocke]

cc @mangod9