Proposal: Reduce paranoia with MAD

[ASpoonPlaysGames]

Currently, MAD is very paranoid and only downloads verified mods. I propose that we relax that restriction and allow mod downloading from URLs sent by servers in some capacity.

• VerifiedMods would still exist and would provide a "seal of approval" for mods, that would bypass the need for a user to accept downloading the mod
• Servers send a list of Mod-URL pairs to clients, which clients then download the mods from. Clients would check the mod list against VerifiedMods and prefer downloading from URLs provided by VerifiedMods if possible
• Any non-verified download that contains a plugin/dll will not be installed (maybe could be loosened to a secondary warning for the user?)
• to avoid annoying platform issues, MAD should just recursive search for mod.json and install each mod as if it was an individual mod
• Remote mods should be mass-disablable from the mods menu, to avoid incompatibility "softlocks" where the user must restart the game to resolve the issue
• Verified mods should be shown differently in the server browser UI, think funny checkmark or something

[catornot]

I think this would go really well with #853

[uniboi]

It'd make sense to put additional restrictions on mods that are not verified / trusted; like not allowing downloaded unverified mods to directly call devbuffer or http script functions

[catornot]

this is somewhat related : R2Northstar/VerifiedMods#38