Enhance URL allow list matching (#49)

* More robust allow list matching
* Handle trailing slashes in allow list
* Support schemeless matching
* Port normalization and null-safety check
* Address copilot comments
* Better CIDR handling
* Update test description

Author: steven10a