debug: bump js-debug and use its auto attach by default once more