Don't use <all_urls>

Instead specify the URL match patterns used in the WebRequest handler.
This still doesn't help with the permissions dialog though (because
"*://*/*.love" still allows access to all URLs) but it should be safer.
Bump version to 0.2.2