#2096 Per-extension white listing

When allowing a swamp repo to pull and use public extensions it is required to “trust all” from the publisher/collective. I’d like the option to just do an extension trust and not blanket all extensions from that source.