First cut at attempt to allow private repos to specify their volo.url in package.json.

Does NOT work - even if we get the URL, which we can, still must download that file. Going to suggest using volo commands after a full download to strip out all contents but what is specified.