URL import

Fetch a remote CSV/JSON URL instead of uploading a file.

Why not: SSRF risk and CORS complexity, unreliable external data, and low product value for a casual platform where users have local files.