P2-05 — IP whitelist and blocklist

[bihius]

Context

Mentioned in ADR-001 as a feature but not needed for the thesis MVP.

To do

• Model IP sets
• Generate HAProxy ACLs from them
• CRUD API

Definition of done

• Allow and deny lists take effect after config apply