In order to test with the staged TUF metadata built for packages.drupal.org, we need to be able to load the TUF metadata from a different URL than the Composer package metadata itself, because in the staging setup, the packages metadata lives on packages.drupal.org but the TUF metadata lives on a different server, even though they agree with each other. (This could be useful in real-life production set-ups.)
So this PR adds support for an optional metadata-url configuration option for a given repository.
In order to test with the staged TUF metadata built for packages.drupal.org, we need to be able to load the TUF metadata from a different URL than the Composer package metadata itself, because in the staging setup, the packages metadata lives on packages.drupal.org but the TUF metadata lives on a different server, even though they agree with each other. (This could be useful in real-life production set-ups.)
So this PR adds support for an optional
metadata-urlconfiguration option for a given repository.