public boolean isURLTrusted(URI url) throws URISyntaxException {
		if (isLocalhostAuthority(url)) {
			return true;
		}

		boolean trusted = isURLTrusted(url, trustedSources) ||
				isURLTrusted(url, temporaryTrustedSources) ||
				// default trusted for usability and trust
				url.toString().startsWith("https://github.com/jbangdev/");

		return trusted;
	}
Check whether a URL like https://www.microsoft.com matches the list of
trusted sources.

- Schemes must match - There's no subdomain matching. For example
https://jbang.dev doesn't match https://www.jbang.dev - Star matches all
subdomains. For example https://*.jbang.dev matches https://www.jbang.dev and
https://foo.bar.jbangdev.com
src/main/java/dev/jbang/net/TrustedSources.java