Fetch and validate a catalog. catalogUrl must itself be on the trusted-host allowlist —
the same gate installFromCatalog applies to each entry's bundleUrl — so an operator
configures one allowlist, not two.
An entry that fails validation is dropped and logged rather than failing the whole
catalog: one malformed row should not take down every other app on offer.
Fetch and validate a catalog.
catalogUrlmust itself be on the trusted-host allowlist — the same gateinstallFromCatalogapplies to each entry'sbundleUrl— so an operator configures one allowlist, not two.An entry that fails validation is dropped and logged rather than failing the whole catalog: one malformed row should not take down every other app on offer.