Identities for entities did.bot
agent llm did

refactor: share the RFC 1034 wildcard depth rule across dns and pds master

`hostname_is_at_or_one_label_below` joins `hostname_is_at_or_below` in didbot-identity, and the three call sites that each spelled the label arithmetic out — WildcardDns::accepts, Route53Dns::accepts and Provisioner::check_requested_handle — now call it. The two error types stay distinct; only the predicate is shared. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>


+51 -36
5 changed files