nuget.config

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <!-- The GitHub Packages source (nuget.pkg.github.com/Systemorph) was
       registered historically but no PackageReference in this solution
       resolves to it (verified: no Systemorph.* package refs across
       Directory.Packages.props or any csproj). NuGet still authenticates
       against every registered source on restore, so leaving it in
       prompted every developer for a GitHub PAT they didn't need. Removed
       — re-add and add a matching packageSourceMapping entry only when a
       real Systemorph-hosted package gets referenced.

       The `mesh-local` source points at `dist/packages/` — the repo's own
       built MeshWeaver.* nupkgs. Lets `#r "nuget:MeshWeaver.X, 3.0.0-preview1"`
       directives in scripts and tests resolve against the local artefacts
       without round-tripping nuget.org (network-free, deterministic).
       packageSourceMapping below pins MeshWeaver.* + Memex.* to this source
       so a typo in a #r doesn't accidentally hit nuget.org and download a
       same-named package from a different publisher. -->
  <packageSources>
    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" protocolVersion="3" />
    <add key="mesh-local" value="dist/packages" />
  </packageSources>
  <packageSourceMapping>
    <packageSource key="mesh-local">
      <package pattern="MeshWeaver.*" />
      <package pattern="Memex.*" />
    </packageSource>
    <packageSource key="nuget.org">
      <package pattern="*" />
    </packageSource>
  </packageSourceMapping>
</configuration>