fix tests. new product advisories enhancements

src/Policy/__Libraries/StellaOps.Policy/Gates/SignatureRequiredGate.cs

@@ -386,12 +386,18 @@ public sealed class SignatureRequiredGate : IPolicyGate
             if (trusted.StartsWith("*@", StringComparison.Ordinal))
             {
                 var domain = trusted[2..];
-                if (issuer.EndsWith($"@{domain}", StringComparison.OrdinalIgnoreCase))
+                if (!domain.Contains('*'))
                 {
-                    return true;
+                    // Simple wildcard: *@domain.com matches any local part with exact domain
+                    if (issuer.EndsWith($"@{domain}", StringComparison.OrdinalIgnoreCase))
+                    {
+                        return true;
+                    }
+                    continue;
                 }
             }
-            else if (trusted.Contains('*'))
+
+            if (trusted.Contains('*'))
             {
                 // General wildcard pattern
                 var pattern = "^" + Regex.Escape(trusted).Replace("\\*", ".*") + "$";