Fix/potential file system race

[arneschmid]

Fixes

• #

Changes

• Fixing code scanning findings
  • Several 'Potential file system race condition'
  • Several 'Missing origin verification in message handler'

Screenshots

Checklist

• 🤖 This change is covered by unit tests (if applicable).
• 🤹 Manual testing has been performed (if necessary).
• 🛡️ Security impacts have been considered (if relevant).
• 📖 Documentation updates are complete (if required).
• 🧠 Third-party dependencies and TPIP updated (if required).

[Copilot]

Pull request overview

This PR addresses code scanning findings by hardening webview message handling (origin verification) and reducing TOCTOU-style filesystem patterns when creating config/metadata files.

Changes:

• Added event.origin verification to multiple webview message handlers.
• Switched config/metadata creation to atomic file creation (fs.writeFileSync(..., { flag: 'wx' })) with EEXIST handling.
• Reworked workspace config seeding logic in ensureWorkspaceConfigFile (but the current approach likely breaks the “open config outside workspace then openFolder” flow).

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
src/webview/bridge.ts	Adds origin verification to the shared webview message bridge handler.
src/viewer/webview/dataViewerApp.tsx	Adds origin verification to viewer app message handler.
src/viewer/webview/components/frameWindowViewer.ts	Adds origin verification to frame window viewer message handler.
src/viewer/webview/components/audioViewer.tsx	Adds origin verification to audio viewer message handler.
src/extension.ts	Replaces direct .vscode/settings.json seeding with workspace.getConfiguration().update() (introduces a likely functional regression).
src/commands/sdsioConfigCommands.ts	Uses atomic file creation for new config files and handles EEXIST.
src/commands/sdsFileCommands.ts	Uses atomic file creation for metadata template and handles EEXIST.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[thorstendb-ARM]

LGTM, try/catch are added to file access