Lowercase hosts on import and reject uppercase hosts for the whitelist

- Lowercase hosts when importing from site YAML files, so we don't potentially add uppercase hosts that Bouncer can't handle.
- Explicitly reject adding an uppercase host to the whitelist.
If we're going to downcase `host`, we should downcase `aliases` too.