feat: support wildcard (*) in attach allowHosts (pinchtab#364)

Allow "*" as a value in security.attach.allowHosts to permit any host
when orchestrator and bridge instances share a Docker network or run
on different machines.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: jzakirov

internal/orchestrator/handlers_instances.go

@@ -451,7 +451,7 @@ func (o *Orchestrator) validateAttachURL(rawURL string) error {
 	host := parsed.Hostname()
 	hostAllowed := false
 	for _, allowed := range o.runtimeCfg.AttachAllowHosts {
-		if host == allowed {
+		if allowed == "*" || host == allowed {
 			hostAllowed = true
 			break
 		}

internal/orchestrator/orchestrator_test.go

@@ -436,6 +436,22 @@ func TestValidateAttachURL_RejectsBridgeBaseURLWithPath(t *testing.T) {
 	}
 }
 
+func TestValidateAttachURL_WildcardHost(t *testing.T) {
+	o := NewOrchestratorWithRunner(t.TempDir(), &mockRunner{portAvail: true})
+	o.ApplyRuntimeConfig(&config.RuntimeConfig{
+		AttachEnabled:      true,
+		AttachAllowHosts:   []string{"*"},
+		AttachAllowSchemes: []string{"http", "ws"},
+	})
+
+	if err := o.validateAttachURL("http://192.168.1.100:9868"); err != nil {
+		t.Fatalf("wildcard host should allow any host, got: %v", err)
+	}
+	if err := o.validateAttachURL("http://bridge-container:9868"); err != nil {
+		t.Fatalf("wildcard host should allow hostname, got: %v", err)
+	}
+}
+
 func TestOrchestrator_RegisterHandlers_LocksSensitiveRoutes(t *testing.T) {
 	o := NewOrchestratorWithRunner(t.TempDir(), &mockRunner{portAvail: true})
 	o.ApplyRuntimeConfig(&config.RuntimeConfig{})