Adding vscodium to a immutable os base

[Universelord]

So i am just making a new distro based on ublue kinoite, https://github.com/Indigo-OS/Indigo-OS and this os is made to run in environments like in school cs lab computer with proper code editor and python and etc,

i want to have some restrictions on the install of extensions for security. i have searched about the json policy file but when i tried it in the distro it didnt work.

About the immutable os thing

yes i know that i have to install vscodium in like distrobox rather than in the base system. but i want an os that is just setup out of the box with codium and python for a cs lab computer. (plus this is not something i am planing to make production ready yet.)