security: add dot-boundary check in brand domain matching
The domain matching used iendswithout boundary checking, allowing
'fake-example.com' to match a brand configured for 'example.com'.
Added explicit check for either exact match or subdomain match with
dot boundary to prevent partial domain suffix attacks.
Co-authored-by: kolega.dev <faizan@kolega.ai>
Kolega.dev
a90870437e