spine: a .ocda.db can be fetched, as a pod zip can

A URL ending in .ocda.db is now downloaded and processed in place,
through the path that already did it for .zip: the same curl call, the
same size and timeout limits, the same refusal of local and private
addresses, the same --allow-downloads guard, the same temp file cleanup.
Only the pattern had to widen.

  rgx_url_zip     ^https?://...[.]zip$
  rgx_url_source  ^https?://...([.]zip|[.]ocda[.]db)$

downloadZipUrl is no downloadSourceUrl and the download temp directory
is spine-download rather than spine-zip-pod; (the extraction directory
keeps its name, being still only for zips).

(assisted by Claude-Code)

0 files changed, 0 insertions, 0 deletions