The remote job and both mobile SDKs applied the debugBundleUploadURL policy;
the daemon did not. So `netbird debug bundle -U` and the desktop UI — the two
paths a person drives by hand, and the ones a policy exists to constrain —
ignored the pin and uploaded wherever the caller or the management server said.
Read the policy under the same lock that already reads the management URL, and
pass it to the resolver, which puts it ahead of the caller's URL.
Reported by @pappz in review on #7514.
riccardom
578acab52d