Add better jail configuration: file CRUD, enable/disable, log paths

Task 4 (Better Jail Configuration) implementation:
- Add fail2ban_config_dir setting to app/config.py
- New file_config_service: list/view/edit/create jail.d, filter.d, action.d files
  with path-traversal prevention and 512 KB content size limit
- New file_config router: GET/PUT/POST endpoints for jail files, filter files,
  and action files; PUT .../enabled for toggle on/off
- Extend config_service with delete_log_path() and add_log_path()
- Add DELETE /api/config/jails/{name}/logpath and POST /api/config/jails/{name}/logpath
- Extend geo router with re-resolve endpoint; add geo_re_resolve background task
- Update blocklist_service with revised scheduling helpers
- Update Docker compose files with BANGUI_FAIL2BAN_CONFIG_DIR env var and
  rw volume mount for the fail2ban config directory
- Frontend: new Jail Files, Filters, Actions tabs in ConfigPage; file editor
  with accordion-per-file, editable textarea, save/create; add/delete log paths
- Frontend: types in types/config.ts; API calls in api/config.ts and api/endpoints.ts
- 63 new backend tests (test_file_config_service, test_file_config, test_geo_re_resolve)
- 6 new frontend tests in ConfigPageLogPath.test.tsx
- ruff, mypy --strict, tsc --noEmit, eslint: all clean; 617 backend tests pass

backend/app/routers/geo.py

@@ -17,7 +17,7 @@ import aiosqlite
 from fastapi import APIRouter, Depends, HTTPException, Path, Request, status
 
 from app.dependencies import AuthDep, get_db
-from app.models.geo import GeoDetail, IpLookupResponse
+from app.models.geo import GeoCacheStatsResponse, GeoDetail, IpLookupResponse
 from app.services import geo_service, jail_service
 from app.utils.fail2ban_client import Fail2BanConnectionError
 
@@ -99,6 +99,35 @@ async def lookup_ip(
 # ---------------------------------------------------------------------------
 
 
+# ---------------------------------------------------------------------------
+# GET /api/geo/stats
+# ---------------------------------------------------------------------------
+
+
+@router.get(
+    "/stats",
+    response_model=GeoCacheStatsResponse,
+    summary="Geo cache diagnostic counters",
+)
+async def geo_stats(
+    _auth: AuthDep,
+    db: Annotated[aiosqlite.Connection, Depends(get_db)],
+) -> GeoCacheStatsResponse:
+    """Return diagnostic counters for the geo cache subsystem.
+
+    Useful for operators and the UI to gauge geo-resolution health.
+
+    Args:
+        _auth: Validated session — enforces authentication.
+        db: BanGUI application database connection.
+
+    Returns:
+        :class:`~app.models.geo.GeoCacheStatsResponse` with current counters.
+    """
+    stats: dict[str, int] = await geo_service.cache_stats(db)
+    return GeoCacheStatsResponse(**stats)
+
+
 @router.post(
     "/re-resolve",
     summary="Re-resolve all IPs whose country could not be determined",