pub fn install_from_url( url: &str, install_root: &Path, expected_sha256: Option<&str>, ) -> Result<InstalledPlugin>
Download a plugin package from a URL, verify its SHA256 if provided, and install it.