OF-3243: Fix DNS wildcard pattern matching to validate label boundaries
The isNameCoveredByPattern() method was incorrectly matching domains that shared suffixes but weren't proper subdomains. For example, "notexternal.com" would incorrectly match the pattern "*.external.com" because the method only checked suffix matching without validating DNS label boundaries.
The fix ensures wildcard patterns only match legitimate subdomains (with proper dot separators) or exact domain matches (needed for certificate validation), while rejecting malformed matches that could bypass DNS overrides or certificate validation.
OF-3242: (code review) Fix ConcurrentModificationException in DNS override resolution
Prevent race condition where findMostSpecificWildcardOverride() could throw ConcurrentModificationException when iterating over dnsOverride.entrySet() while another thread modifies the map concurrently. This could occur during DNS resolution when multiple threads access or modify DNS overrides simultaneously.
![dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>](/s/120108/1xwkylm/_/images/icons/spinner.gif){kind=icon}