Autoclosing braces and workspace trust

Fixes unwanted injection of backticks and |, and marks the extension as safe for untrusted workspaces.

Thanks to @brettcannon for suggesting these improvements!