[FEATURE] Support WebFetch permissions by domain AND path

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

I often need to allow claude to read documentation or files from well known platforms like github.com or https://raw.githubusercontent.com. However, I cannot trust the whole domain, as I only trust specific projects. Given that the only permission currently supported by WebFetch is now by domain, I am left with approving every URL for every fetch.

It would be a great help to grant permissions to https://raw.githubusercontent.com/php/php-src/ for example, so I could build a list of trusted projects under GitHub.

Proposed Solution

I'd like to be able to add a permission like the following in settings.local.json

{
  "permissions": {
    "allow": [
      "WebFetch(domain:raw.githubusercontent.com,path:/php/php-src/*)"
    ]
   }
}

Alternative Solutions

_No response_

Priority

Medium - Would be very helpful

Feature Category

Configuration and settings

Use Case Example

_No response_

Additional Context

_No response_