Two review follow-ups on the MDM debug-bundle upload override:
- applyMDMPolicy returned early on an empty policy before reaching the
clear-on-absent path, so a policy that dropped every key left a stale
upload target directing bundles on a reused Config. Resolve the override
unconditionally, up front, so an absent, empty, or invalid value fails
closed to "" (falling back to the management-supplied or default target).
- Extract the resolution into mdmDebugBundleUploadURL, dropping the outer
function's cognitive complexity from 26 to 20 (SonarCloud gate is 25).
Tests cover the empty-policy and invalid-URL clearing paths.