One-shot public wrapper: normalizes domain and every entry in
allowedDomains (case/trailing-dot) then delegates to domainAllowed for
the match. networkEgress and egressFetch call domainAllowed directly
instead, each normalizing its own allowlist ONCE at construction; this
wrapper is for barrel/external callers that just want a single normalized
comparison without owning that memoization.
One-shot public wrapper: normalizes
domainand every entry inallowedDomains(case/trailing-dot) then delegates todomainAllowedfor the match.networkEgressandegressFetchcalldomainAlloweddirectly instead, each normalizing its own allowlist ONCE at construction; this wrapper is for barrel/external callers that just want a single normalized comparison without owning that memoization.