🌐 Update allowed domains for workflow configuration

[dsyme]

Summary

• Consolidated specific domain groups into more generic ecosystem categories
• Updated allowed domains in workflow configuration
• Simplified domain management for fonts and CDN resources

Changes

• Merged specific domains like cdn.jsdelivr.net, fonts.googleapis.com, and fonts.gstatic.com into broader ecosystem categories
• Added new domain groups: fonts and node-cdns
• Updated workflow configuration and domain ecosystem mapping
• Enhanced domain classification in test cases

[Copilot]

Pull request overview

This PR consolidates specific domain references into broader ecosystem categories by introducing two new ecosystem identifiers: fonts (for Google Fonts domains) and node-cdns (for jsDelivr CDN). This simplifies domain management and makes workflow configurations more semantic and maintainable.

Changes:

• Added fonts ecosystem containing fonts.googleapis.com and fonts.gstatic.com
• Added node-cdns ecosystem containing cdn.jsdelivr.net
• Updated mcp-inspector workflow to use new ecosystem names instead of literal domains

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
pkg/workflow/data/ecosystem_domains.json	Added fonts and node-cdns ecosystem definitions with their respective domains
pkg/workflow/domains_test.go	Added test cases to verify GetDomainEcosystem correctly identifies the new ecosystems and that GetAllowedDomains expands them properly
.github/workflows/mcp-inspector.md	Replaced three literal domain entries with two ecosystem identifiers (fonts and node-cdns) in the network allowed list
.github/workflows/mcp-inspector.lock.yml	Compiled workflow file reflecting the domain changes, but also contains significant unrelated changes including sparse checkout steps, local action setup, CLI/Docker builds, container configuration changes, and field removals

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.