fix(vscode): harden runtime dependency validation (integrity checks, SHA256 verification, metadata timeout)

fix(vscode): harden runtime dependency validation (integrity checks, SHA256 verification, metadata timeout) #924