chore(deps): unpin AWS SDK, satisfy trust policies, fix vsce packaging

Unpin all @aws-sdk/client-* from exact 3.901.0 to ^3.901.0 so they track
updates rather than staying on an old pin; re-resolving lands on 3.1070.0
(the newest version past the 7-day cooldown).

Regenerate pnpm-lock.yaml so a clean `pnpm install` passes the repo's
supply-chain policies:
- minimumReleaseAge: the previously-fresh @smithy transitive deps now
  resolve to aged versions automatically on re-resolution.
- no-downgrade: add version-scoped trustPolicyExclude for chokidar@4.0.3,
  semver@5.7.2, semver@6.3.1, and undici-types@6.21.0 — all confirmed
  benign provenance gaps (maintainers dropped npm provenance on those
  specific releases and restored it later), not takeovers.

Add keepNames to the esbuild config so class names survive bundling. The
AWS SDK bump triggered an esbuild identifier collision (e.g.
DescribeKeyCommand -> DescribeKeyCommand2) that broke the provider tests'
constructor.name dispatch.

Fix `vsce package`: compile no longer runs through npm-run-all, which
spawned the corepack-managed pnpm shim directly and failed with EACCES
(the cached pnpm.cjs has no execute bit). compile now invokes esbuild and
vite directly with && for correct failure propagation; the redundant
compile:extension/compile:appinspector-webview sub-scripts are removed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: peter-smith-phd

build/extension.mjs

@@ -29,6 +29,11 @@ async function main() {
 		entryPoints: ["src/extension.ts", "src/test/**/*.test.ts"],
 		bundle: true,
 		format: "cjs",
+		/* Preserve original function/class names through bundling (and
+		 * minification). The AWS SDK command classes are dispatched on by
+		 * `constructor.name` (in tests, via a fake client), which esbuild would
+		 * otherwise rename on identifier collisions (e.g. `DescribeKeyCommand2`). */
+		keepNames: true,
 		minify: production,
 		sourcemap: !production,
 		sourcesContent: false,

package.json

@@ -436,12 +436,10 @@
 			}
 		}
 	},
-	"packageManager": "pnpm@11.0.9+sha512.34ce82e6780233cf9cad8685029a8f81d2e06196c5a9bad98879f7424940c6817c4e4524fb7d38b8553ceed48b9758b8ebaf1abd3600c232c4c8cf7366086f38",
+	"packageManager": "pnpm@11.9.0+sha512.bd682d5d03fe525ef7c9fd6780c6884d1e756ac4c9c9fe00c538782824310dcf90e3ddc4f53835f06dfaebd5085e41855e0bcbb3b60de2ac5bbab89e5036f03b",
 	"scripts": {
 		"vscode:prepublish": "pnpm run package",
-		"compile": "npm-run-all -p compile:extension compile:appinspector-webview",
-		"compile:appinspector-webview": "vite build",
-		"compile:extension": "node --env-file=.env.local --env-file-if-exists=.env build/extension.mjs",
+		"compile": "node --env-file=.env.local --env-file-if-exists=.env build/extension.mjs && vite build",
 		"compile:font": "node build/icon-font.mjs",
 		"dev": "npm-run-all -p dev:extension dev:localstack-web-mock-server dev:appinspector-webview",
 		"dev:appinspector-webview": "vite build --watch --no-clear-screen",
@@ -456,25 +454,25 @@
 		"test": "vscode-test"
 	},
 	"devDependencies": {
-		"@aws-sdk/client-account": "3.901.0",
-		"@aws-sdk/client-api-gateway": "3.901.0",
-		"@aws-sdk/client-cloudformation": "3.901.0",
-		"@aws-sdk/client-cloudwatch-logs": "3.901.0",
-		"@aws-sdk/client-cognito-identity-provider": "3.901.0",
-		"@aws-sdk/client-dynamodb": "3.901.0",
-		"@aws-sdk/client-ecr": "3.901.0",
-		"@aws-sdk/client-eventbridge": "3.901.0",
-		"@aws-sdk/client-iam": "3.901.0",
-		"@aws-sdk/client-kinesis": "3.901.0",
-		"@aws-sdk/client-kms": "3.901.0",
-		"@aws-sdk/client-lambda": "3.901.0",
-		"@aws-sdk/client-s3": "3.901.0",
-		"@aws-sdk/client-secrets-manager": "3.901.0",
-		"@aws-sdk/client-sfn": "3.901.0",
-		"@aws-sdk/client-sns": "3.901.0",
-		"@aws-sdk/client-sqs": "3.901.0",
-		"@aws-sdk/client-ssm": "3.901.0",
-		"@aws-sdk/client-sts": "3.901.0",
+		"@aws-sdk/client-account": "^3.901.0",
+		"@aws-sdk/client-api-gateway": "^3.901.0",
+		"@aws-sdk/client-cloudformation": "^3.901.0",
+		"@aws-sdk/client-cloudwatch-logs": "^3.901.0",
+		"@aws-sdk/client-cognito-identity-provider": "^3.901.0",
+		"@aws-sdk/client-dynamodb": "^3.901.0",
+		"@aws-sdk/client-ecr": "^3.901.0",
+		"@aws-sdk/client-eventbridge": "^3.901.0",
+		"@aws-sdk/client-iam": "^3.901.0",
+		"@aws-sdk/client-kinesis": "^3.901.0",
+		"@aws-sdk/client-kms": "^3.901.0",
+		"@aws-sdk/client-lambda": "^3.901.0",
+		"@aws-sdk/client-s3": "^3.901.0",
+		"@aws-sdk/client-secrets-manager": "^3.901.0",
+		"@aws-sdk/client-sfn": "^3.901.0",
+		"@aws-sdk/client-sns": "^3.901.0",
+		"@aws-sdk/client-sqs": "^3.901.0",
+		"@aws-sdk/client-ssm": "^3.901.0",
+		"@aws-sdk/client-sts": "^3.901.0",
 		"@biomejs/biome": "^2.4.13",
 		"@eslint/compat": "^2.0.5",
 		"@eslint/js": "^9.39.4",