Add origin field and filter for ban sources (Tasks 1 & 2)

- Task 1: Mark imported blocklist IP addresses
  - Add BanOrigin type and _derive_origin() to ban.py model
  - Populate origin field in ban_service list_bans() and bans_by_country()
  - BanTable and MapPage companion table show origin badge column
  - Tests: origin derivation in test_ban_service.py and test_dashboard.py

- Task 2: Add origin filter to dashboard and world map
  - ban_service: _origin_sql_filter() helper; origin param on list_bans()
    and bans_by_country()
  - dashboard router: optional origin query param forwarded to service
  - Frontend: BanOriginFilter type + BAN_ORIGIN_FILTER_LABELS in ban.ts
  - fetchBans / fetchBansByCountry forward origin to API
  - useBans / useMapData accept and pass origin; page resets on change
  - BanTable accepts origin prop; DashboardPage adds segmented filter
  - MapPage adds origin Select next to time-range picker
  - Tests: origin filter assertions in test_ban_service and test_dashboard

frontend/src/api/config.ts

@@ -13,6 +13,8 @@ import type {
   JailConfigUpdate,
   LogPreviewRequest,
   LogPreviewResponse,
+  MapColorThresholdsResponse,
+  MapColorThresholdsUpdate,
   RegexTestRequest,
   RegexTestResponse,
   ServerSettingsResponse,
@@ -119,3 +121,21 @@ export async function flushLogs(
   );
   return resp.message;
 }
+
+// ---------------------------------------------------------------------------
+// Map color thresholds
+// ---------------------------------------------------------------------------
+
+export async function fetchMapColorThresholds(
+): Promise<MapColorThresholdsResponse> {
+  return get<MapColorThresholdsResponse>(ENDPOINTS.configMapColorThresholds);
+}
+
+export async function updateMapColorThresholds(
+  update: MapColorThresholdsUpdate
+): Promise<MapColorThresholdsResponse> {
+  return put<MapColorThresholdsResponse>(
+    ENDPOINTS.configMapColorThresholds,
+    update,
+  );
+}