signatures: a listed signed path takes `*`, as everything else does

Review 4, appendix: whether a write is signed because `_continuum/access/signed` lists
its path compared the listed paths by prefix (`signatures::related`), so a `*` there
was a literal key, while api.md says the list holds paths as capabilities name them,
which take `*` since 1259, and signed values already read the same list as patterns
(`envelope::reaches_signed`). A listed `metrics/*/alerts` signed nothing.

It compares by `access::agree` now: within or above the pattern, `*` for any one key.

0 files changed, 0 insertions, 0 deletions