Check Domain Limit

Check whether a domain is allowed to sign up.

Checks in order:

1. domain_exclusions — if matched, return banned
2. domain_inclusions — if matched, return allowed (skip count)
3. Count existing users — enforce SIGNUP_DOMAIN_LIMIT