VS Code 1.141.1

Merged PR 779: Fix MCP sandbox permission approval isolation (MSRC 13…

…8669)

## Summary
- Restrict root sandbox configuration to shared deny rules; ignore legacy root allowedDomains and allowWrite grants at runtime.
- Support per-server sandbox access grants while preserving root and server deny rules.
- Persist sandbox permission approvals only for the requesting server.
- Use server-specific sandbox settings filenames and add regression coverage for schemas, permission isolation, and configuration round-tripping.
## Validation
- 47 targeted MCP types, configuration generation, and sandbox service tests passed.
- Core transpile and typecheck watchers reported 0 errors after the changes.
- git diff --check passed.
- WSL runtime validation was not performed.
## Security tracking
Msrc-Case-Id: 138669
## Commit history
All changes are combined into a single commit.