[BUG] Potential race condition during start between vscode extensions and firewall script

Environment

• Platform (select one):
• [ ] Anthropic API
• [ ] AWS Bedrock
• [ ] Google Vertex AI
• [x] Other: devcontainers configuration

Bug Description

Adding additional vscode extensions to devcontainers.json might collide with the firewall starting in postStartCommand. After the deny gets in place, it will drop packets to extension repos.

Ideally the firewall script would start after the extensions are installed.

In my case, I am installing anthropic.claude-code so that I can use Cmd+Esc. Any reason why this isn't a "default extension"?