Add domain path-based access rules

[myagizmaktav]

Summary

Add Vercel-like domain/path access rules for Dokploy domains.

Requested behavior

• Allow rules per domain and path
• Support path match types: exact, prefix, regex
• Support basic auth on protected paths
• Support IP allow list on protected paths
• Allow advanced matcher expressions for Traefik request conditions
• Work for both application domains and compose domains

Example

Protect google.com/redirect with basic auth and optional IP restrictions while preserving normal traffic for other paths.

Verification

• Typecheck passes
• Targeted domain/Traefik tests pass
• Full vitest passes excluding existing real integration test file

[myagizmaktav]

Implemented in #4409.