Remove extension whitelisting logic
Created by: sqs
This removes the actual whitelisting logic and instead exposes a hook for checking whether an extension is allowed. It also renames the name of the site config field from "whitelist" to "allow" terminology to be more precise.
This PR updates the CHANGELOG.md file to describe any user-facing changes.