Load each external app through its own ModuleFederation instance instead
of a single shared host instance. All remotes loaded through one instance
share the same shareScopeMap by reference, so a faulty app that corrupts
that scope during init breaks every other app too. Per-instance isolation
contains such failures to the offending app while preserving parallel
loading and singleton identity of shared modules.

(cherry picked from commit 3926dbb)