Method credentials_for_host

crates/openshell-prover/src/credentials.rs:142–151

Credentials that target a given host. Matching mirrors runtime host policy semantics for exact names and first-label wildcards, so a proposal for `*.github.com` is treated as credentialed when the attached credential targets `api.github.com`.

(&self, host: &str)

    /// proposal for `*.github.com` is treated as credentialed when the
    /// attached credential targets `api.github.com`.
    pub fn credentials_for_host(&self, host: &str) -> Vec<&Credential> {
        self.credentials
            .iter()
            .filter(|c| {
                c.target_hosts
                    .iter()
                    .any(|target| host_patterns_overlap(host, target))
            })
            .collect()
    }

    /// API capability registry for a given host. Exact matches win, then
    /// wildcard host overlap is used so credentialed wildcard proposals can be