chore(deps): co-bump @microsoft/1ds-post-js to v4 and refresh lockfiles

The 1ds-core-js v4 bump alone leaves @microsoft/1ds-post-js v3 carrying
its own applicationinsights-core-js v2, producing the PostChannel /
IChannelControls type mismatch in 1dsAppender.ts. Bumping post-js to
^4.4.1 unifies the dep tree on applicationinsights-core-js 3.4.1.
Also syncs remote/ and remote/web/ package.json + refreshes all
package-lock.json files so npm ci passes everywhere.

Author: kanywst

package-lock.json

@@ -91,7 +91,7 @@
     "@github/copilot": "1.0.52",
     "@github/copilot-sdk": "^0.3.0",
     "@microsoft/1ds-core-js": "^4.4.1",
-    "@microsoft/1ds-post-js": "^3.2.18",
+    "@microsoft/1ds-post-js": "^4.4.1",
     "@microsoft/dev-tunnels-connections": "^1.3.48",
     "@microsoft/dev-tunnels-contracts": "^1.3.41",
     "@microsoft/dev-tunnels-management": "^1.3.41",

package.json

@@ -5,8 +5,8 @@
   "dependencies": {
     "@github/copilot": "1.0.52",
     "@github/copilot-sdk": "^0.3.0",
-    "@microsoft/1ds-core-js": "^3.2.13",
-    "@microsoft/1ds-post-js": "^3.2.18",
+    "@microsoft/1ds-core-js": "^4.4.1",
+    "@microsoft/1ds-post-js": "^4.4.1",
     "@parcel/watcher": "^2.5.6",
     "@vscode/copilot-api": "^0.3.1",
     "@vscode/deviceid": "^0.1.5",