fix: change SDK rollForward to latestPatch for lock file compatibility

latestFeature allowed rolling from 10.0.103 to 10.0.201 on CI runners,
causing Microsoft.NET.ILLink.Tasks version mismatch with lock files.
latestPatch keeps the SDK within the same feature band (10.0.1xx),
ensuring lock file consistency across local and CI environments.

Made-with: Cursor

Author: Hongwei-MB

global.json

@@ -1,6 +1,6 @@
 {
   "sdk": {
     "version": "10.0.103",
-    "rollForward": "latestFeature"
+    "rollForward": "latestPatch"
   }
 }

src/Dotnet.CI.Template.Sample/packages.lock.json

@@ -10,9 +10,9 @@
       },
       "Microsoft.NET.ILLink.Tasks": {
         "type": "Direct",
-        "requested": "[10.0.4, )",
-        "resolved": "10.0.4",
-        "contentHash": "CCx8ojW3mOL150/LnP0DK7qpMrJEt6xxNCmJFKoX89v1h0FwpsEHqennowGPYDxp6zIkIO4f9PxynjOeLF+1zw=="
+        "requested": "[10.0.3, )",
+        "resolved": "10.0.3",
+        "contentHash": "0B6nZyCHWXnvmlB559oduOspVdNOnpNXPjhpWVMovLPAsDVG7A4jJR9rzECf67JUzxP8/ee/wA8clwIzJcWNFA=="
       }
     }
   }