Follow-up from "fix(auth): allow dash in hostname URI"

The following discussion from !2374 (merged) should be addressed:

@timofurrer started a discussion:

We probably want to refactor this and NOT use a regex to validate a valid hostname. However, I want to minimize the blast radius here and just allow dashes for now to solve #7995 (closed).

I'll create a follow-up issue.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information