Missing support for wildcard domain names

MicroCluster requires the name of the cluster member to be a FQDN and it also checks that this name is among certificate SAN.
https://github.com/canonical/microcluster/blob/d50fa5075619b0e03e0f6b5e86b10be1a18f1831/internal/rest/resources/control.go#L83

```go
// Subject Alternate Name values. (Note that these values may not be valid
// if invalid values were contained within a parsed certificate. For
// example, an element of DNSNames may not be a valid DNS domain name.)
DNSNames []string
```

However usage of `ValueInSlice` doesn't work for certificates that have wildcard DNS
This certificate won't work for `member1.maas.internal`
```
X509v3 Subject Alternative Name:
DNS:*.maas.internal, DNS:maas, IP Address:127.0.0.1, URI:*
```

```go
// ValueInSlice returns true if key is in list.
func ValueInSlice[T comparable](key T, list []T) bool {
for _, entry := range list {
if entry == key {
return true
}
}

return false
}
```

The validation is in internal/rest/resources/control.go around line 83; start by reading that check and the ValueInSlice call. Trace the existing certificate SAN handling and its tests, then verify that a member such as member1.maas.internal is accepted when the SAN contains *.maas.internal while exact-match cases continue to work.

Written by the indexing model from the issue text.