fix: keep wildcard model aliases in discovery (#23)

Only provider/* wildcards are access rules. claude-sonnet-4-6* is a
model-group alias and callable, but was being filtered out.

Co-authored-by: Yusef Mohamadi <yuseferi@gmail.com>