Function fetchOgcApiFeatures

Fetches all features from an OGC API Features endpoint, following next pagination links.

A thin accumulator over streamOgcApiFeatures — it holds the whole collection, which is what the display path needs and what a bounded consumer must NOT do.

Security controls applied:

• URL validated via validateUrl() before any network request
• All requests carry the provided AbortSignal for cooperative cancellation
• maxFeatures limit enforced to prevent memory exhaustion
• Response type field validated before data consumption

⚠️ It rejects on the same three conditions as before — invalid URL, network failure, malformed response — but it no longer raises them itself. They are thrown by streamOgcApiFeatures and propagate through the await below, so the caller's contract is unchanged; the @throws tag moved to where the throw now lives, because a tag whose body carries no throw is a claim the gate cannot check.