UR-Nexus 1.68.9

• Narrowed that allowlist entry from ur.com to ur.com/docs. Replacing a
  docs-only host with a bare domain widened what WebFetch retrieves without
  asking, on a list whose own header warns that broad entries are dangerous
  where a host may serve user-supplied content — and the domain in question
  does not exist yet, so whatever ends up hosted there would have inherited
  that trust. The matcher enforces path-segment boundaries, so /docs-evil/x
  does not match. Caught by apiTool, which asserted the old entry.