pub fn host_is_allowed(host: &str, allowed_domains: &[String]) -> bool
Evaluate whether the given hostname is allowed by the provided suffix allowlist.
When the list is empty, all hosts are considered valid.