Issue #8329 - Add wildcard and CIDR pattern support to ProxyConfiguration include/exclude addresses

[afarber]

Fixes #8329

Add pattern matching support for ProxyConfiguration.Proxy included/excluded addresses:

• Add HostPortPattern class supporting exact hostnames, wildcard prefix (*.example.com), wildcard suffix (internal.*), CIDR notation (192.168.0.0/16), and IP ranges (10.0.0.1-10.0.0.10)
• Add HostPortSet to work with IncludeExcludeSet for pattern-based matching
• Update ProxyConfiguration.Proxy to use IncludeExcludeSet<String, HostPort> instead of HashSet<String>
• Add validation to reject invalid patterns (userinfo @, paths /, middle wildcards)
• Patterns without port match any port; patterns with port match only that specific port
• Plain IP addresses use string comparison for backward compatibility; only CIDR and IP ranges use DNS resolution