OF-3243: Fix DNS wildcard pattern matching to validate label boundaries
The isNameCoveredByPattern() method was incorrectly matching domains that shared suffixes but weren't proper subdomains. For example, "notexternal.com" would incorrectly match the pattern "*.external.com" because the method only checked suffix matching without validating DNS label boundaries.
The fix ensures wildcard patterns only match legitimate subdomains (with proper dot separators) or exact domain matches (needed for certificate validation), while rejecting malformed matches that could bypass DNS overrides or certificate validation.
![dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>](/s/120108/1xwkylm/_/images/icons/spinner.gif){kind=icon}