Function host_allowed 

pub fn host_allowed(host: &str, allow: &[String]) -> bool

True if host matches any allowlist pattern. An empty allowlist denies all (fail-closed). Reuses the same matcher the agent’s reqwest guard uses, so per-MCP-server egress allowlisting behaves identically to agent-level hosts.