perf: Implement 2-stage map routing for faster domain lookup

Split domain routing into two stages for improved performance:
- Stage 1: map_str for exact domains (O(log n) using ebtree)
- Stage 2: map_dom for wildcards only (O(n) but small set)

Wildcards now stored in separate wildcards.map file.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

haproxy_mcp/tools/domains.py

@@ -10,6 +10,7 @@ from pydantic import Field
 from ..config import (
     MAP_FILE,
     MAP_FILE_CONTAINER,
+    WILDCARDS_MAP_FILE_CONTAINER,
     POOL_COUNT,
     MAX_SLOTS,
     StateField,
@@ -199,11 +200,12 @@ def register_domain_tools(mcp):
                     except IOError as e:
                         return f"Error: Failed to save map file: {e}"
 
-                    # Then update HAProxy map via Runtime API
+                    # Then update HAProxy maps via Runtime API
+                    # 2-stage matching: exact domains go to domains.map, wildcards go to wildcards.map
                     try:
                         haproxy_cmd(f"add map {MAP_FILE_CONTAINER} {domain} {pool}")
                         if not is_subdomain:
-                            haproxy_cmd(f"add map {MAP_FILE_CONTAINER} .{domain} {pool}")
+                            haproxy_cmd(f"add map {WILDCARDS_MAP_FILE_CONTAINER} .{domain} {pool}")
                     except HaproxyError as e:
                         # Rollback: remove the domain we just added from entries and re-save
                         rollback_entries = [(d, b) for d, b in entries if d != domain and d != f".{domain}"]
@@ -276,9 +278,10 @@ def register_domain_tools(mcp):
             remove_domain_from_config(domain)
 
             # Clear map entries via Runtime API (immediate effect)
+            # 2-stage matching: exact from domains.map, wildcard from wildcards.map
             haproxy_cmd(f"del map {MAP_FILE_CONTAINER} {domain}")
             try:
-                haproxy_cmd(f"del map {MAP_FILE_CONTAINER} .{domain}")
+                haproxy_cmd(f"del map {WILDCARDS_MAP_FILE_CONTAINER} .{domain}")
             except HaproxyError as e:
                 logger.warning("Failed to remove wildcard entry for %s: %s", domain, e)