ModuleStore reads the catalogue from the core extension
(XC_VM::extensions_list) and asks XC_VM::plugins_check whether the
Modules API key bought each paid module. Every module is listed, marked
free, purchased or paid, with what is installed of it here, matched by
the manifest's update.slug. Cached 5 minutes per API key; a store that
did not answer is not cached.