Potential fix for code scanning alert no. 2: Incomplete URL substring sanitization

[daltonnyx]

Potential fix for https://github.com/saigontechnology/AgentCrew/security/code-scanning/2

To fix the issue, the code should use a robust URL parsing method to validate the domain of self.base_url. Specifically, the urlparse function from Python's urllib.parse module can be used to extract the hostname from the URL. The hostname can then be checked to ensure it matches githubcopilot.com or its subdomains. This approach prevents bypasses caused by malformed URLs.

The fix involves:

1. Parsing self.base_url using urlparse.
2. Extracting the hostname from the parsed URL.
3. Validating that the hostname ends with .githubcopilot.com.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.