feat(webfetch): Allow granular URL permissions

[robertfall]

Summary

• allow granular URL permission rules for webfetch
• expand permission patterns to include protocol/host/path variants
• add tests for config + webfetch patterns

Testing

• bun test ./test/tool/webfetch.test.ts ./test/permission/next.test.ts ./test/config/config.test.ts

Issue

• Fixes #7445