"kpm restore" on CoreCLR

parent #411 

Tested with public feed sources, private feed sources and authenticated proxies.
This isn't right. These need to be dependencies for the package manager only