Use the ACL factory for secured semaphore creation

Opt-in Windows port of the resolved Semaphore(int,int,string,out bool,SemaphoreSecurity) constructor to SemaphoreAcl.Create. Preserve the original argument container and out destination. Only literal null or names of at most 260 characters without NUL qualify; dynamic names, named/commented syntax, initializers, deferred contexts and unsafe conditional snapshots stay unchanged. Add System.Threading.AccessControl 6.0.0 only to modeled projects owning original eligible sites, without downgrading existing references. Framework CAS, native failure messages and cross-platform behavior are not emulated. Standalone, outside composites.