Update Kestrel Dependency for CVE mitigation

[kkdawkins]

Hello -

The Clerk package is currently built against a version of Kestrel.Core that is vulnerable to this CVE .

Can we get an updated build moving it to 2.3.6?

Thanks!

[early-cv]

I agree