Use PSL private suffixes for domain keys (split vercel.app/github.io/etc.)

Enable tldts allowPrivateDomains for both the registrable-domain derivation
and the favicon guard. Platform-hosted services (app.vercel.app,
*.herokuapp.com, *.workers.dev, user.github.io, bucket.s3.amazonaws.com) now
resolve to their own host instead of collapsing onto the platform, and each
gets its own favicon. .local/IPs/single-label/invalid TLDs stay excluded.

Author: RhysSullivan

output/graphql.json

@@ -1034,7 +1034,7 @@
     "name": "Microsoft Graph (DEMO)",
     "description": "Connect to the data that drives productivity – mail, calendar, contacts, documents, directory, devices, and more.",
     "url": "http://graphql-demo.azurewebsites.net/",
-    "icon": "https://azurewebsites.net/favicon.ico",
+    "icon": "https://graphql-demo.azurewebsites.net/favicon.ico",
     "categories": [],
     "feeds": [
       "graphql-apis"
@@ -1103,7 +1103,7 @@
     "name": "Shopify Storefront",
     "description": "The Storefront API gives you full creative control to build customized purchasing experiences for your customers.",
     "url": "https://graphql.myshopify.com/api/graphql.json",
-    "icon": "https://myshopify.com/favicon.ico",
+    "icon": "https://graphql.myshopify.com/favicon.ico",
     "categories": [],
     "feeds": [
       "graphql-apis"