Hostname allowlist. Supports exact hosts and wildcard subdomains.
Use entries like "hooks.example.com" or "*.mycorp.com". The wildcard only matches subdomains ("foo.mycorp.com"), not the apex ("mycorp.com"). When empty or omitted, any public host is allowed (subject to SSRF IP checks).
