Backport #107952 to 1.49

Fixes #107951

Uses child_process.execFile() rather than child_process.exec() to more
effectively resolve the command injection vulnerability.

Fixes microsoft/vscode-remote-release#3676

debug: update js-debug

When completions show, trigger completions when entering a new word b…

When completions show, trigger completions when entering a new word but only from inactive providers, https://github.com/microsoft/vscode/issues/106573

Fix user data init freeze

Co-authored-by: NBenjamin Pasero <benjpas@microsoft.com>

- add perf mark up and logs

debug: update js-debug

For https://github.com/microsoft/vscode/issues/106484

Revert more specific class names for editor tokens

Reverts #103485
Fixes #106261

I believe that #103485 broke cases where the markdown renderer creates tokenized strings that are used outside of an editor's dom node (such as in hovers or in webviews)

The safest fix for now is to revert it. We can revist this and make the markdown renderer handle the tokenized output better next iteration

@Tyriar has fixed this for the September release, but for August we will not use the custom hover in the custom tree view by default. This change is mostly a revert of 874c98d8. In the September iteration, we will go back to using custom hovers by default in the custom tree view.
Fixes #106096

Part of #106007

web: missing settings change events from FileUserDataProvider

Fixes #106105

Fixes #106102