The IDE as a Backdoor: Detecting and Mitigating Malicious VS Code Tunnels in Enterprise Cloud Networks