[Kaniska (v-Kaniska244)]

Summary

Consolidate Universal’s Conda security updates into the Conda feature installation and bump the feature version to 2.0.2.

Changes

• Install patched versions of cryptography, pyopenssl, openssl, and brotli.
• Upgrade pip after Conda operations to prevent solver downgrades, and install python-dotenv==1.2.2.
• Remove stale pip packages older than 26.1, Python bytecode, and installation caches.
• Preserve command arguments in sudo_if and default addCondaForge to false.

Test coverage

• Add regression scenarios for root, vscode, and Universal-like codespace environments.
• Build the codespace scenario from Ubuntu Noble, removing the default ubuntu user before creating codespace with UID/GID 1000.
• Configure both containerUser and remoteUser as codespace.
• Verify patched package versions, cache cleanup, runtime-user write access, and Conda/pip functionality.
• Avoid fixed runtime UID/GID assertions to accommodate GitHub runner remapping.

Validation

• Shell syntax, scenario configuration, and whitespace checks passed.
• Local integration runs were interrupted; full scenario results remain unverified.