permission: reject wildcard references when dropping env

[RafaelGSS]

cc: @jasnell @mcollina I guess that's the safest approach for env dropping wdyt?

[nodejs-github-bot]

Review requested:

• @nodejs/security-wg

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.48%. Comparing base (782a3ac) to head (f001daa).
⚠️ Report is 30 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff            @@
##             main   #66773    +/-   ##
========================================
  Coverage   90.47%   90.48%            
========================================
  Files         791      797     +6     
  Lines      277225   277603   +378     
  Branches    53313    53329    +16     
========================================
+ Hits       250829   251198   +369     
+ Misses      16801    16799     -2     
- Partials     9595     9606    +11     

Files with missing lines	Coverage Δ
src/permission/permission.cc	75.00% <100.00%> (+0.51%)	⬆️

... and 55 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.