Support Allowlisting Registries

[asmello]

As a security feature, users should be able to provide a list of registry URLs that packages are allowed to be downloaded from.

[mara-schulke]

Same for this one, i would try to work from a users perspective – the bad errors are much worse for users than the inability to allowlist registries