Until it's figured out how we're supposed to use these on .

Partially reverts db4eb52.

Now that CFS feed is public.

Since we can no longer use Dependabot due to CFS,
we just have to update manually (with `--save`, but automatic).
Which means we need `^` semver so `npm update` does what we expect
(which is to update to the latest minor version).
Except for the VS Code types, those use `~` so we only get  updates.
This is because it must match our engine version of VS Code.

Also just omit the resolved registry from the lockfile
(since the replace option didn't really work as expected)

The latest version of the tool will use the Azure API to grab a token,
it just needs to be run in a context where Azure CLI is authenticated.
I think.