Add better jail configuration: file CRUD, enable/disable, log paths

Task 4 (Better Jail Configuration) implementation:
- Add fail2ban_config_dir setting to app/config.py
- New file_config_service: list/view/edit/create jail.d, filter.d, action.d files
  with path-traversal prevention and 512 KB content size limit
- New file_config router: GET/PUT/POST endpoints for jail files, filter files,
  and action files; PUT .../enabled for toggle on/off
- Extend config_service with delete_log_path() and add_log_path()
- Add DELETE /api/config/jails/{name}/logpath and POST /api/config/jails/{name}/logpath
- Extend geo router with re-resolve endpoint; add geo_re_resolve background task
- Update blocklist_service with revised scheduling helpers
- Update Docker compose files with BANGUI_FAIL2BAN_CONFIG_DIR env var and
  rw volume mount for the fail2ban config directory
- Frontend: new Jail Files, Filters, Actions tabs in ConfigPage; file editor
  with accordion-per-file, editable textarea, save/create; add/delete log paths
- Frontend: types in types/config.ts; API calls in api/config.ts and api/endpoints.ts
- 63 new backend tests (test_file_config_service, test_file_config, test_geo_re_resolve)
- 6 new frontend tests in ConfigPageLogPath.test.tsx
- ruff, mypy --strict, tsc --noEmit, eslint: all clean; 617 backend tests pass

frontend/src/types/config.ts

@@ -144,3 +144,60 @@ export interface MapColorThresholdsUpdate {
   threshold_medium: number;
   threshold_low: number;
 }
+
+// ---------------------------------------------------------------------------
+// Jail config files (Task 4a)
+// ---------------------------------------------------------------------------
+
+export interface JailConfigFile {
+  /** File stem, e.g. "sshd". */
+  name: string;
+  /** Actual filename, e.g. "sshd.conf". */
+  filename: string;
+  /** Whether the jail is currently enabled in its config file. */
+  enabled: boolean;
+}
+
+export interface JailConfigFilesResponse {
+  files: JailConfigFile[];
+  total: number;
+}
+
+export interface JailConfigFileContent extends JailConfigFile {
+  content: string;
+}
+
+export interface JailConfigFileEnabledUpdate {
+  enabled: boolean;
+}
+
+// ---------------------------------------------------------------------------
+// Generic conf-file entry (filter.d / action.d)
+// ---------------------------------------------------------------------------
+
+export interface ConfFileEntry {
+  /** Base name without extension, e.g. "sshd". */
+  name: string;
+  /** Full filename, e.g. "sshd.conf". */
+  filename: string;
+}
+
+export interface ConfFilesResponse {
+  files: ConfFileEntry[];
+  total: number;
+}
+
+export interface ConfFileContent {
+  name: string;
+  filename: string;
+  content: string;
+}
+
+export interface ConfFileUpdateRequest {
+  content: string;
+}
+
+export interface ConfFileCreateRequest {
+  name: string;
+  content: string;
+}