Aspire attempting to extract bundle to restricted location

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Describe the bug

I'm attempting to bootstrap an aspire project in a devcontainer, but Aspire attempts to download its bundles to a restricted location, and hangs.

### Expected Behavior

A new Aspire project can be created

### Steps To Reproduce

Using the following devcontainer definition:
```json
{
"name": "Aspire Repro",
"image": "mcr.microsoft.com/devcontainers/base:2.1.7-bookworm",
"workspaceFolder": "/workspaces/aspire-repro",
"containerEnv": {
"WORKSPACE": "${containerWorkspaceFolder}",
"FunctionsHostExePath": "/usr/bin/func",
},

"features": {
"ghcr.io/devcontainers/features/dotnet": {
"version": "10.0.202",
"additionalVersions": [
"8.0.420",
],
},
"ghcr.io/jlaundry/devcontainer-features/azure-functions-core-tools:1.0.0": {
"version": "4",
},
"ghcr.io/microsoft/aspire-devcontainer-feature/aspire:2.0.0": {},
},

"customizations": {
"vscode": {

"extensions": [
"ms-azuretools.vscode-azurefunctions",
"microsoft-aspire.aspire-vscode",
"ms-dotnettools.csdevkit",
]
}
}
}
```
run the following command:
```bash
aspire new aspire-empty -l Debug
```

### Exceptions (if any)

Process hangs:
```
[00:12:03] [info] Program: Version: 13.2.2+25961cf7043e413abaf8ad84348988f2904b90d5
[00:12:03] [info] Program: Build ID: 13.200.226.20702
[00:12:03] [info] Program: Working directory: /workspaces/aspire-repro
[00:12:03] [dbug] Features: Feature check: stagingChannelEnabled, ConfigKey: features:stagingChannelEnabled, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature stagingChannelEnabled using default value: False
[00:12:03] [dbug] Features: Feature check: showAllTemplates, ConfigKey: features:showAllTemplates, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature showAllTemplates using default value: False
[00:12:03] [dbug] Features: Feature check: stagingChannelEnabled, ConfigKey: features:stagingChannelEnabled, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature stagingChannelEnabled using default value: False
[00:12:03] [dbug] Features: Feature check: stagingChannelEnabled, ConfigKey: features:stagingChannelEnabled, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature stagingChannelEnabled using default value: False
[00:12:03] [dbug] Features: Feature check: execCommandEnabled, ConfigKey: features:execCommandEnabled, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature execCommandEnabled using default value: False
[00:12:03] [info] Program: Command: aspire new aspire-empty -l Debug
[00:12:03] [dbug] Program: Parsing arguments: new aspire-empty -l Debug
[00:12:03] [dbug] Program: Executing command: aspire new aspire-empty
[00:12:03] [dbug] AuxiliaryBackchannelMonitor: Current command is not MCP start command. Auxiliary backchannel monitoring disabled.
[00:12:03] [dbug] Features: Feature check: stagingChannelEnabled, ConfigKey: features:stagingChannelEnabled, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature stagingChannelEnabled using default value: False
[00:12:03] [dbug] BundleService: Ensuring bundle is extracted to /usr/local.
[00:12:03] [dbug] BundleService: Acquiring bundle extraction lock at /usr/local/.aspire-bundle-lock...
[00:12:03] [dbug] BundleService: Ensuring bundle is extracted to /usr/local.
[00:12:03] [dbug] BundleService: Acquiring bundle extraction lock at /usr/local/.aspire-bundle-lock...
[00:12:03] [dbug] Features: Feature check: updateNotificationsEnabled, ConfigKey: features:updateNotificationsEnabled, Value: '(null)', DefaultValue: True
[00:12:03] [dbug] Features: Feature updateNotificationsEnabled using default value: True
[00:12:03] [dbug] BundleService: Ensuring bundle is extracted to /usr/local.
[00:12:03] [dbug] BundleService: Acquiring bundle extraction lock at /usr/local/.aspire-bundle-lock...
[00:12:03] [dbug] Features: Feature check: showAllTemplates, ConfigKey: features:showAllTemplates, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature showAllTemplates using default value: False
[00:12:03] [dbug] Features: Feature check: stagingChannelEnabled, ConfigKey: features:stagingChannelEnabled, Value: '(null)', DefaultValue: False
[00:12:03] [dbug] Features: Feature stagingChannelEnabled using default value: False
[00:12:03] [dbug] BundleService: Ensuring bundle is extracted to /usr/local.
[00:12:03] [dbug] BundleService: Acquiring bundle extraction lock at /usr/local/.aspire-bundle-lock...
[00:12:03] [dbug] BundleService: Ensuring bundle is extracted to /usr/local.
[00:12:03] [dbug] BundleService: Acquiring bundle extraction lock at /usr/local/.aspire-bundle-lock...

⠞ Resolving template version...
```
(The path `/usr/local` of course requiring `sudo` access....)

### Aspire doctor output

```
Aspire Environment Check
========================

.NET SDK
✔ .NET 10.0.202 installed (x64)

Container Runtime
❌ No container runtime detected
Install Docker Desktop: https://www.docker.com/products/docker-desktop or Podman: https://podman.io/getting-started/installation
See: https://aka.ms/dotnet/aspire/containers

Environment
✔ WSL2 environment detected
Details:
If you experience container connectivity issues, ensure Docker Desktop WSL integration is enabled.
⚠ HTTPS development certificate is not trusted
Run 'aspire certs trust' to trust the HTTPS development certificate.
See: https://aka.ms/aspire-prerequisites#dev-certs
Details:
Certificate 252BDEE44FD75245750D9ED61C294EF68BF1C782 exists in the personal store but was not found in the trusted root store.

Summary: 2 passed, 1 warnings, 1 failed
For detailed prerequisites: https://aka.ms/aspire-prerequisites
```
(Fixing the errors does not change the outcome)

### Anything else?

VSCode info:
```
Version: 1.116.0 (user setup)
Commit: 560a9dba96f961efea7b1612916f89e5d5d4d679
Date: 2026-04-15T00:28:13Z
Electron: 39.8.7
ElectronBuildId: 13797146
Chromium: 142.0.7444.265
Node.js: 22.22.1
V8: 14.2.231.22-electron.0
OS: Windows_NT x64 10.0.22631
```