Module redirect_uri 

Pure redirect-URI trust checks shared by DCR (registration.rs) and CIMD (authorize.rs) client resolution. No I/O, no AuthState — every function here takes only strings/patterns and returns a bool, so this module has no feature dependency of its own beyond reqwest::Url parsing; it’s gated behind http-axum only because its sole callers are.