Multi-host egress example in SKILL.md and lint suggestion are invalid syntax #8

Summary

skills/annotate-openshell-policy/SKILL.md (line ~98) shows a comma-separated multi-host egress line, which generate rejects. lint also suggests an invalid multi-host directive.

Steps to reproduce

1. Put the example from SKILL.md in a file ex.py:

   # @openshell egress pypi.org:443,files.pythonhosted.org:443 reason="pip install at start" access=read-only

2. openshell-annotate generate .
3. For the lint suggestion: a comment line with two URLs (for example mini-swe-agent src/minisweagent/agents/default.py:1) and run openshell-annotate lint .

Expected

• The SKILL.md example is valid and generate accepts it.
• lint suggests directives that generate can parse: one directive per host (or comma-separated hosts become supported).

Actual

error: ex.py:1: `pypi.org:443,files.pythonhosted.org` contains characters that are not valid in a host name or wildcard

and lint prints suggest: @openshell egress mini-swe-agent.com:443, minimal-agent.com:443 reason="...", which is not valid syntax either.

Found while testing five real projects (see the local candidate report). Numbered #2 in that report.