fix(vscode): update qs lockfile

[hongjr03]

Summary

This change updates the VS Code extension lockfile so the transitive qs dependency resolves to the patched 6.15.2 release.

Root cause: @vscode/vsce depends on typed-rest-client, which accepts qs through ^6.9.1; the lockfile had resolved it to 6.15.1, which is covered by GHSA-q8mj-m7cp-5q26 / CVE-2026-8723.

Validation

• npm audit --json reports 0 vulnerabilities in editors/vscode
• npm test
• npm run package:debug

[hongjr03]

Closing in favor of #112, which applies the same qs 6.15.2 lockfile update through Dependabot and has already been merged.