feat(extensions): authenticate GitHub-hosted catalog and download requests with GITHUB_TOKEN/GH_TOKEN#2087

Open

anasseth wants to merge 3 commits intogithub:mainfrom

anasseth:feat/github-token-auth-private-catalogs

Commits on Apr 4, 2026

feat(extensions): authenticate GitHub-hosted catalog and download requests with GITHUB_TOKEN/GH_TOKEN
anasseth
committed

Commits on Apr 8, 2026

feat(extensions): replaced host in url substring check with proper hostname parsing & added 3 new spoofing tests -> Issue # 2037
anasseth
committed
fix(extensions): harden GitHub token auth against URL spoofing and redirect leakage -> Issue # 2037
anasseth
committed