Add payments.coinbase.com to whitelist

[suryatejamandadi-cb]

Summary

• Adds payments.coinbase.com to the whitelist array in src/config.json.
• This is a legitimate Coinbase-owned payments domain and should be exempted from phishing detection.

Test plan

• No code changes; JSON-only edit validated with jq (valid JSON, single entry appended).

---

Note

Low Risk
Single trusted-domain entry in JSON config; no application logic changes, though allowlist edits always warrant verifying the hostname is genuinely Coinbase-owned.

Overview
Adds payments.coinbase.com to the phishing allowlist in src/config.json, alongside existing trusted domains like localhost and other legitimate services.

That domain will no longer be flagged by the extension’s phishing checks, which should stop false positives when users interact with Coinbase’s official payments flow.

^{Reviewed by Cursor Bugbot for commit 06080bb. Bugbot is set up for automated code reviews on this repo. Configure here.}