validateBundleUploadURL ran on the job's URL or the MDM override and then
ResolveUploadURL folded in the destination published by management, which never
met the same check. A malformed or plaintext published value therefore slipped
through resolution and failed later inside UploadDebugBundle's requireHTTPS,
surfacing as a transport error instead of a validation one. Management validates
at write time, so this only bites against an older or mismatched server — but
the two destinations are interchangeable and should be held to one rule.
Reported by cubic on #7514.