all: Update esbuild and tsx across packages

[Copilot]

Description

Ensures each package resolves a single esbuild@0.28.1 (aligning with the prior eng bump #2340) instead of two copies — a 0.28.x copy plus an esbuild 0.27.x copy bundled by tsx@4.21.0.

Rather than using overrides, this migrates every package to @microsoft/vscode-azext-eng@^1.1.0-alpha.1 (the latest alpha tag), which already declares esbuild ^0.28.0 and makes tsx an optional dependency. Applied to webview, github, utils, appsettings, azure, and appservice:

• Bumped @microsoft/vscode-azext-eng to ^1.1.0-alpha.1 in each package.
• Added "tsx": "*" to the dev dependencies of utils, azure, and appservice, whose tests run under vscode-test (its base mocha config does require: ['tsx']).
• github and appsettings have no tests and no esbuild usage, so they get neither tsx nor a direct esbuild.
• webview runs mocha directly but keeps import=tsx plus "tsx": "*", because its unit tests import @fluentui/react-components (CommonJS) at runtime, which Node's native --experimental-transform-types cannot load.
• Regenerated each package-lock.json so only the eng/tsx/esbuild resolutions change, leaving unrelated dependencies pinned.

The eng bump pulls a newer typescript-eslint, which surfaced new lint errors. These are fixed in azure, appservice, and utils while preserving public API and behavior (e.g. removing async but keeping Promise<T> return types via Promise.resolve, and replacing unsafe any access with typed access). Where a caught error may contain PII (masking.ts), the preserve-caught-error lint is suppressed with a justification rather than attaching { cause }; in timeout.ts the caught value is rejected as-is with clearTimeout moved into a finally; and intentional patterns (e.g. the temporary intersection types in tempTypes.ts) are kept with targeted eslint-disable comments.

Not changed: eng (already on esbuild 0.28.1) and auth (already migrated to the new eng version).

Each package now resolves a single esbuild@0.28.1 and tsx@4.22.4, with no nested esbuild copy, and all six packages build and lint cleanly.

[bwateratmsft]

@copilot instead of using overrides like this, start over and upgrade to @microsoft/vscode-azext-eng@1.1.0-alpha.1 (the latest alpha tag). tsx becomes an optional dependency in that version, so "tsx": "*" will be needed in the dev dependencies where tests are run in VSCode. If they are run in Mocha directly, tsx is not needed and should not be added as a dev dependency. Instead, they should use the following Mocha options in package.json:

    "mocha": {
        "node-option": [
            "experimental-transform-types",
            "disable-warning=ExperimentalWarning",
            "import=@microsoft/vscode-azext-eng/mocha"
        ],
        // ...
    },

The update may introduce new lint errors, so deal with those as well as needed.

[Copilot]

@copilot instead of using overrides like this, start over and upgrade to @microsoft/vscode-azext-eng@1.1.0-alpha.1 (the latest alpha tag). tsx becomes an optional dependency in t...

Reworked to drop the overrides and migrate every package to @microsoft/vscode-azext-eng@^1.1.0-alpha.1 instead (a4632ff). Each package now resolves a single esbuild@0.28.1 (+ tsx@4.22.4 where needed) with no nested esbuild copy.

• utils, azure, appservice run tests via vscode-test, whose base mocha config does require: ['tsx'], so they get "tsx": "*" in devDependencies.
• github and appsettings have no tests and no esbuild usage, so they get neither (eng's eslint/typescript don't need them).
• webview is an exception: it runs mocha directly, but its unit tests import @fluentui/react-components (CommonJS) at runtime, which Node's native --experimental-transform-types can't load (cjs-module-lexer can't see the named exports, and Node can't load .tsx). So webview keeps import=tsx plus "tsx": "*".

The eng bump pulled a newer typescript-eslint, which surfaced new lint errors. I fixed those in azure, appservice, and utils while preserving public API and behavior (e.g. removing async but keeping Promise<T> return types via Promise.resolve, adding { cause } to rethrown errors, replacing unsafe any access with typed access). All six packages build and lint clean.