docs: mv comments about hyphen-literals to jsdoc

src/sanitize/base64URL.ts

@@ -12,6 +12,8 @@ import { getSanitizerFn } from "./_helpers.js";
  * - No line breaks are used
  *
  * @see https://base64.guru/standards/base64url
+ *
+ * **Pattern Notes:**
+ * - The hyphen literal is at the end of the group to avoid unintentional range creation.
  */
 export const sanitizeBase64URL = getSanitizerFn(/[^a-zA-Z0-9_-]/g);
-// Note: hyphen literal is at the end of the group to avoid range creation

src/sanitize/jwt.ts

@@ -2,6 +2,8 @@ import { getSanitizerFn } from "./_helpers.js";
 
 /**
  * Remove characters from `str` which are not valid in a JSON Web Token.
+ *
+ * **Pattern Notes:**
+ * - The hyphen literal is at the end of the group to avoid unintentional range creation.
  */
 export const sanitizeJWT = getSanitizerFn(/[^a-zA-Z0-9._-]/g);
-// Note: hyphen literal is at the end of the group to avoid range creation

src/validate/base64URL.ts

@@ -13,6 +13,8 @@ import { getRegexValidatorFn } from "./_helpers.js";
  * - Must be at least 2 characters long
  *
  * @see https://base64.guru/standards/base64url
+ *
+ * **Pattern Notes:**
+ * - The hyphen literal is at the end of the group to avoid unintentional range creation.
  */
 export const isValidBase64URL = getRegexValidatorFn(/^[a-zA-Z0-9_-]{2,}$/);
-// Note: hyphen literal is at the end of the group to avoid range creation

src/validate/jwt.ts

@@ -3,9 +3,11 @@ import { getRegexValidatorFn } from "./_helpers.js";
 /**
  * Returns `true` if `value` is a valid JWT.
  *
- * JWTs contain three [Base64URL-encoded][base64url] sections separated by periods (`.`).
+ * JWTs contain three [Base64URL-encoded](https://base64.guru/standards/base64url) sections
+ * separated by periods (`.`).
  *
- * [base64url]: https://base64.guru/standards/base64url
+ * **Pattern Notes:**
+ * - The minimum length is 2 characters per section.
+ * - Hyphen literals are at the end of their groups to avoid unintentional range creation.
  */
 export const isValidJWT = getRegexValidatorFn(/^([a-zA-Z0-9_-]{2,}\.){2}[a-zA-Z0-9_-]{2,}$/);
-// Note: hyphen literals are at the end of their groups to avoid range creation