exitNodeIPOfArg failed to match shared-in nodes by hostname because TrimSuffix returns the full FQDN when the peer's tailnet suffix differs from ours. Add a fallback that matches against the first DNS label (hostname) of the peer.