Revisit analyzer rules and consider automating compliance

[TimHess]

Sonar and StyleCop rules should be revisited for 4.0. Enable desired rules (some have comments to be enabled for Steeltoe 3.0 but weren't addressed in time), disable rules we commonly ignore and revisit priorities as appropriate.

Additionally, formatting-related rule compliance could potentially be automated via dotnet format and/or Nuke (@macsux may be useful as a resource)

[TimHess]

This epic is not dependent on #897 but is likely simpler afterwards.