fix(extensions): wire up list --available catalog query + harden add --from path traversal

fix(extensions): wire up list --available catalog query + harden add --from path traversal #4398