fix(lib/test): fix failing test and invalid cloudflare workers rule

Signed-off-by: Xe Iaso <me@xeiaso.net>

data/bots/aggressive-brazilian-scrapers.yaml

@@ -6,8 +6,6 @@
     - userAgent.contains("MSIE")
     # Trident is the Internet Explorer browser engine
     - userAgent.contains("Trident")
-    # iPods are not in common use
-    - userAgent.contains("iPod")
     # Opera is a fork of chrome now
     - userAgent.contains("Presto")
     # Windows CE is discontinued
@@ -26,5 +24,5 @@
     any:
     # This is not released, even Windows 11 calls itself Windows 10
     - userAgent.contains("Windows NT 11.0")
-    # Safari's User-Agent doesn't contain Safari
-    - (!userAgent.contains("Chrome") && userAgent.contains("Safari"))
+    # iPods are not in common use
+    - userAgent.contains("iPod")

data/bots/cloudflare-workers.yaml

@@ -1,4 +1,4 @@
 - name: cloudflare-workers
-  expression: >
-    "Cf-Worker" in headers
+  headers_regex:
+    CF-Worker: .*
   action: DENY

lib/anubis_test.go

@@ -83,7 +83,7 @@ func TestCVE2025_24369(t *testing.T) {
 		Next:   http.NewServeMux(),
 		Policy: pol,
 
-		CookieDomain:      "local.cetacean.club",
+		CookieDomain:      ".local.cetacean.club",
 		CookiePartitioned: true,
 		CookieName:        t.Name(),
 	})