Hotfix
- Fixes vscode-copilot permissions injection when VS Code
settings.jsoncontains JSONC syntax (comments and trailing commas).
What was happening
component:permissions failed with a JSON unmarshal error for some VS Code setups because the merge logic assumed strict JSON input.
Fix
- JSON merge now falls back to JSONC normalization (strip comments/trailing commas) before parsing.
- Keeps strict-error behavior for truly invalid JSON.
- Adds regression tests for JSONC merge and vscode permissions injection path.
Impact
Install flow no longer fails at component:permissions for vscode-copilot due to JSONC-formatted VS Code settings.