Backport 8.0.x/dataset match subdomain

[antoineaboufayssal]

Make sure these boxes are checked accordingly before submitting your Pull Request -- thank you.

Contribution style:

• I have read the contributing guide lines at
  https://docs.suricata.io/en/latest/devguide/contributing/contribution-process.html

Our Contribution agreements:

• I have signed the Open Information Security Foundation contribution agreement at
  https://suricata.io/about/contribution-agreement/ (note: this is only required once)

Changes (if applicable):

• I have updated the User Guide (in doc/userguide/) to reflect the changes made
• I have updated the JSON schema (in etc/schema.json) to reflect all logging changes
  (including schema descriptions)
• I have created a ticket at
  https://redmine.openinfosecfoundation.org/projects/suricata/issues

Link to ticket: https://redmine.openinfosecfoundation.org/issues/8879

SV_BRANCH=OISF/suricata-verify#3277

[antoineaboufayssal]

• Commits cherry pick cleanly from next/1383/20260610/v1 #15601
• I wanted to include the commit from ci: check-doc-rules copies data(sets) files into tmpdir #15606 but noticed that 8.0.x has no doc rule checker, so that won't be needed

[codecov]

Codecov Report

❌ Patch coverage is 76.08696% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 81.64%. Comparing base (27ff8c8) to head (cb282ea).

Additional details and impacted files

@@              Coverage Diff               @@
##           main-8.0.x   #16024      +/-   ##
==============================================
- Coverage       81.68%   81.64%   -0.04%     
==============================================
  Files            1016     1016              
  Lines          276981   277026      +45     
==============================================
- Hits           226245   226188      -57     
- Misses          50736    50838     +102     

Flag	Coverage Δ
fuzzcorpus	63.81% <17.39%> (-0.09%)	⬇️
livemode	18.68% <10.86%> (+<0.01%)	⬆️
netns	20.15% <0.00%> (-0.01%)	⬇️
pcap	44.40% <0.00%> (-0.10%)	⬇️
suricata-verify	65.16% <76.08%> (-0.04%)	⬇️
unittests	58.59% <0.00%> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[victorjulien]

Merged in #16042, thanks!