docs: add data.nuget.org guidance to VS audit sources options

Agent-Logs-Url: https://github.com/NuGet/docs.microsoft.com-nuget/sessions/9a8aed72-cad5-45e7-8c7e-3d228c6a871d

Co-authored-by: zivkan <[email protected]>

Author: Copilot

docs/consume-packages/nuget-visual-studio-options.md

@@ -111,6 +111,10 @@ Audit sources provide vulnerability data during restore without acting as packag
 If no audit sources are configured, NuGet Audit uses package sources.
 [Learn more about audit sources](/nuget/reference/nuget-config-file#auditsources)
 
+> [!TIP]
+> If your organization blocks access to `api.nuget.org`, ask your network administrator to allow `https://data.nuget.org/v3/index.json`.
+> You can then add that endpoint as an audit source to keep NuGet Audit vulnerability checks enabled without allowing package downloads from `api.nuget.org`.
+
 ![Audit Sources section with checkbox "Use separate sources for vulnerability audit"](media/vsoptions/audit-sources-1.png)
 
 Configure an audit source by selecting the checkbox, "Use separate sources for vulnerability audit".