Stage 6: jail management — backend service, routers, tests, and frontend

- jail_service.py: list/detail/control/ban/unban/ignore-list/IP-lookup
- jails.py router: 11 endpoints including ignore list management
- bans.py router: active bans, ban, unban
- geo.py router: IP lookup with geo enrichment
- models: Jail.actions, ActiveBan.country/.banned_at optional, GeoDetail
- 217 tests pass (40 service + 36 router + 141 existing), 76% coverage
- Frontend: types/jail.ts, api/jails.ts, hooks/useJails.ts
- JailsPage: jail overview table with controls, ban/unban forms,
  active bans table, IP lookup
- JailDetailPage: full detail, start/stop/idle/reload, patterns,
  ignore list management

backend/app/models/ban.py

@@ -91,12 +91,13 @@ class ActiveBan(BaseModel):
 
     ip: str = Field(..., description="Banned IP address.")
     jail: str = Field(..., description="Jail holding the ban.")
-    banned_at: str = Field(..., description="ISO 8601 UTC start of the ban.")
+    banned_at: str | None = Field(default=None, description="ISO 8601 UTC start of the ban.")
     expires_at: str | None = Field(
         default=None,
         description="ISO 8601 UTC expiry, or ``null`` if permanent.",
     )
-    ban_count: int = Field(..., ge=1, description="Running ban count for this IP.")
+    ban_count: int = Field(default=1, ge=1, description="Running ban count for this IP.")
+    country: str | None = Field(default=None, description="ISO 3166-1 alpha-2 country code.")
 
 
 class ActiveBanListResponse(BaseModel):