fix: clear msal audit failure, scope dependabot ignore to npm, setup-node v7.1.0 (#20)

* fix(deps): bump @azure/identity to 4.14.1, clearing the msal-node advisory

GHSA-xcx6-jx8p-x3h5 (high) via @vscode/vsce failed the audit gate on main. identity 4.14.1 moves its msal requirement from ^6 to ^7.1.0, resolving msal-node 7.1.2. Verified: check:security exits 0 (3 moderate left, below the high gate), vsce ls passes, 27 unit tests green.

* ci: scope the @types/vscode ignore rule to npm, align setup-node to v7.1.0

The ignore block sat under the github-actions update where it never applied, so the npm group PR carried the @types/vscode 1.103 to 1.140 major. Move it under npm like the sibling launchers. Bump the three setup-node pins from v6 to v7.1.0.

---------

Co-authored-by: Michael Gasperini <michael@mikesoft.it>

Author: TheStreamCode

.github/dependabot.yml

@@ -26,6 +26,10 @@ updates:
     open-pull-requests-limit: 5
     labels:
       - dependencies
+    ignore:
+      # The @types/vscode major tracks the engine floor declared in package.json;
+      # advancing the types ahead of the floor breaks the compatibility tests.
+      - dependency-name: "@types/vscode"
 
   - package-ecosystem: github-actions
     directory: /
@@ -45,7 +49,3 @@ updates:
     open-pull-requests-limit: 5
     labels:
       - dependencies
-    ignore:
-      # The @types/vscode major tracks the engine floor declared in package.json;
-      # advancing the types ahead of the floor breaks the compatibility tests.
-      - dependency-name: "@types/vscode"

.github/workflows/ci.yml

@@ -36,7 +36,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22
           cache: npm
@@ -74,7 +74,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22
           cache: npm
@@ -100,7 +100,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 22
           cache: npm