chore: widen git-shield allowlist for remaining website false positives

Markdown-wrapped/bare tonymenu.app mentions, the landing page's CDN/font
includes, Starlight's stock diataxis.fr links, and the @astrojs/starlight
import specifier were still tripping the PII scanner. Also glob-ignore
the website's binary image assets, whose raw bytes occasionally get
misread as a person's name.

Author: vekexasia

.pii-allowlist

@@ -174,6 +174,16 @@ registry[.]npmjs[.]org
 ^2026-02-01T
 
 # ── TonyMenu marketing site (website/) public domains and doc links ──
-^https?://([a-z0-9-]+\.)*tonymenu\.app(/.*)?$
+# Unanchored: also matches wrapped in markdown bold/backticks, or bare
+# hostname with no scheme (e.g. shown as plain text in the landing page).
+https?://([a-z0-9-]+\.)*tonymenu\.app(/[^\s*`]*)?
+([a-z0-9-]+\.)*tonymenu\.app(/[a-z0-9_-]*)?
 ^https?://([a-z0-9-]+\.)*astro\.build(/.*)?$
 ^https?://astro\.badg\.es(/.*)?$
+# Third-party CDN/font includes used by the landing page.
+^https?://fonts\.googleapis\.com(/.*)?$
+^https?://fonts\.gstatic\.com(/.*)?$
+^https?://cdnjs\.cloudflare\.com(/.*)?$
+# Starlight starter template boilerplate (create-astro default content).
+^https?://(www\.)?diataxis\.fr(/.*)?$
+^@astrojs/starlight(/.*)?$

git-shield.toml

@@ -9,5 +9,9 @@ ignore_globs = [
   # (opencollective.com, github.com/sponsors/*) that the PII scanner
   # mistakes for sensitive data. Not secrets, regenerated on every bump.
   "website/package-lock.json",
+  # Binary image/marketing assets: raw bytes occasionally misread as a
+  # person's name by the PII scanner. No text content to leak.
+  "website/public/assets/*.jpg",
+  "website/src/assets/*.webp",
 ]
 allowlist_paths = [".pii-allowlist"]