Tighten up the flood path regex

- This tightens up the first `.*` to instead just match `cy/` for the
  Welsh pages, enforces `.aspx` at the end, and captures a possible
  query string.