T-10: Fix get_geo_batch_lookup for proper injection with GeoCache instance

Instead of returning a bound method (geo_cache.lookup_batch), now inject
the GeoCache instance directly into routers and services. This provides
proper runtime isolation since T-04 made GeoCache a proper object.

Changes:
- Remove get_geo_batch_lookup() dependency provider
- Add GeoCacheDep type alias for injecting GeoCache instances
- Update all routers (bans, blocklist, dashboard, jails) to use GeoCacheDep
- Update ban_service, blocklist_service, jail_service to accept GeoCache
- Update service protocols to match new signatures
- Update docstrings to reference GeoCache methods instead of module functions

All callers now call geo_cache.lookup_batch(...) directly instead of
geo_batch_lookup(...), providing real dependency injection with proper
testing isolation.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

backend/app/services/blocklist_service.py

@@ -44,7 +44,7 @@ if TYPE_CHECKING:
     from apscheduler.schedulers.asyncio import AsyncIOScheduler
 
     from app.config import Settings
-    from app.models.geo import GeoBatchLookup
+    from app.services.geo_cache import GeoCache
 
 log: structlog.stdlib.BoundLogger = structlog.get_logger()
 
@@ -303,7 +303,7 @@ async def import_source(
     *,
     ban_ip: Callable[[str, str, str], Awaitable[None]],
     geo_is_cached: Callable[[str], bool] | None = None,
-    geo_batch_lookup: GeoBatchLookup | None = None,
+    geo_cache: GeoCache | None = None,
 ) -> ImportSourceResult:
     """Download and apply bans from a single blocklist source.
 
@@ -417,9 +417,9 @@ async def import_source(
                 to_lookup=len(uncached_ips),
             )
 
-        if uncached_ips and geo_batch_lookup is not None:
+        if uncached_ips and geo_cache is not None:
             try:
-                await geo_batch_lookup(uncached_ips, http_session, db=db)
+                await geo_cache.lookup_batch(uncached_ips, http_session, db=db)
                 log.info(
                     "blocklist_geo_prewarm_complete",
                     source_id=source.id,
@@ -448,7 +448,7 @@ async def import_all(
     *,
     ban_ip: Callable[[str, str, str], Awaitable[None]],
     geo_is_cached: Callable[[str], bool] | None = None,
-    geo_batch_lookup: GeoBatchLookup | None = None,
+    geo_cache: GeoCache | None = None,
 ) -> ImportRunResult:
     """Import all enabled blocklist sources.
 
@@ -478,7 +478,7 @@ async def import_all(
             socket_path,
             db,
             geo_is_cached=geo_is_cached,
-            geo_batch_lookup=geo_batch_lookup,
+            geo_cache=geo_cache,
             ban_ip=ban_ip,
         )
         results.append(result)