reported by Alexey Proschenko
> There is unsafe use of "cat /etc/installurl" in PKG_PATH composition code
> because of man INSTALLURL(5):
> "Empty lines and lines beginning with ‘#’ in the file are ignored."
the current code was looking for the first line not starting with #
which was wrong in case the line was empty.