Add confirmation prompt for URL-based extension installs (#2745)

Display a yellow warning panel and default-deny [y/N] prompt when
installing extensions via --from <url>, since this bypasses the
catalog trust boundary.