Switch to declarativeNetRequestWithHostAccess (v1.0.1)
Use declarativeNetRequestWithHostAccess instead of declarativeNetRequest
to scope rules.json to explicit host_permissions. This removes the broad
"Block content on any page" permission and limits rule enforcement to
YouTube and AI chatbot domains only.