Add a veto if a .desktop file has NoDisplay=true

This fixes an incomplete port from explicit error to veto.
Thanks go to Elad Alfassa for finding the initial problem.
A keyword search match is better than the project name
trivial: Tiny search optimisation

All locales in AppStream are valid UTF-8.