fix AWS tag validation: replace * with @ and , with space

AWS tag values only allow `[\p{L}\p{Z}\p{N}_.:/=+\-@]*` — no commas
or asterisks. Use space as separator and `@` as wildcard stand-in in
`compactAllowlist` output.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ryan-williams

src/allowlist.ts

@@ -37,5 +37,7 @@ function matchDomainPaths(hostname: string, pathname: string, rule: AllowRuleObj
 }
 
 export function compactAllowlist(rules: AllowRule[]): string {
-  return rules.map(r => typeof r === "string" ? r : r.domain).join(",")
+  // AWS tag values only allow [\p{L}\p{Z}\p{N}_.:/=+\-@]
+  // Use space as separator (instead of comma), `@` for `*`
+  return rules.map(r => typeof r === "string" ? r : r.domain).join(" ").replaceAll("*", "@")
 }