T-10: Fix get_geo_batch_lookup for proper injection with GeoCache instance

Instead of returning a bound method (geo_cache.lookup_batch), now inject
the GeoCache instance directly into routers and services. This provides
proper runtime isolation since T-04 made GeoCache a proper object.

Changes:
- Remove get_geo_batch_lookup() dependency provider
- Add GeoCacheDep type alias for injecting GeoCache instances
- Update all routers (bans, blocklist, dashboard, jails) to use GeoCacheDep
- Update ban_service, blocklist_service, jail_service to accept GeoCache
- Update service protocols to match new signatures
- Update docstrings to reference GeoCache methods instead of module functions

All callers now call geo_cache.lookup_batch(...) directly instead of
geo_batch_lookup(...), providing real dependency injection with proper
testing isolation.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

backend/app/routers/blocklist.py

@@ -28,7 +28,7 @@ from app.dependencies import (
     AuthDep,
     DbDep,
     Fail2BanSocketDep,
-    GeoBatchLookupDep,
+    GeoCacheDep,
     HttpSessionDep,
     SchedulerDep,
     SettingsDep,
@@ -118,7 +118,7 @@ async def run_import_now(
     db: DbDep,
     _auth: AuthDep,
     socket_path: Fail2BanSocketDep,
-    geo_batch_lookup: GeoBatchLookupDep,
+    geo_cache: GeoCacheDep,
 ) -> ImportRunResult:
     """Download and apply all enabled blocklist sources immediately.
 
@@ -136,8 +136,8 @@ async def run_import_now(
         db,
         http_session,
         socket_path,
-        geo_is_cached=geo_service.is_cached,
-        geo_batch_lookup=geo_batch_lookup,
+        geo_is_cached=geo_cache.is_cached,
+        geo_cache=geo_cache,
         ban_ip=ban_service.ban_ip,
     )