fix: match dotted and versioned args in approve-scripts/deny-scripts