"kpm restore" on CoreCLR

parent #411 

Tested with public feed sources, private feed sources and authenticated proxies.