hardening: VS Code

[jakub-bochenski]

Related to SANDBOX-23

This script closes the sockets opened by VS Code: https://github.com/VirtusLab/sandcat/blob/5faa9a2dd22e43b3016a13b266aefb7166227a42/scripts/app-post-start.sh

Just need to verify if it works w/o sudo

[mattolson]

I added some comments to #108 and then that should be good to merge, and then we need to followup with this script to cleanup the actual sockets.

[jakub-bochenski]

I think the script can be run without sudo this way:

{
    "containerUser": "root",
    "remoteUser": "vscode",
    "postStartCommand": "whoami" // This will output "root"
}