changed command palette text for #28847

- language
- resource

* Add CSP To Root Document

Adds a content security policy to the root vscode document. This limits what can be loaded. Important changes:

* Connect-src is limited to `self` or `https:`
* script-src is limited to `self`
* object and child-src are limited to `self`
* Media allows `self` `http` `https` and `data`

* Add preload to gulp

* Default to none

* Don't use let in preload

* Remove Unused Html Content Renderer Extensibility

Removes a few options from the html content renderer that are currently not used

* Fix messageList

fixes #28799

- Refactor configuration services to read settings from multiple folders
- Implement merging strategy for multi root workspace settings
- Implement a configuration model that can be reused across layers
- Implement getRoot API in workspace context service