Eliminates the socat bridge dependency by using OpenSSH's built-in
Unix socket forwarding (-L port:socket_path). The dagger user already
owns /run/dagger/engine.sock so no intermediate TCP listener is needed.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Users can now tap the + button on the Allowed addresses screen to add an
address or glob pattern (e.g. *@example.com) by hand. The UI helper text
explains that * matches any characters. Trusted-sender matching is updated
to evaluate stored patterns as globs so domain-wide patterns like *@example.com
work automatically. The shared globMatch utility is extracted from the Sieve
interpreter so both features use the same logic.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Bot of Thomas Güttler