AbuseIPDB Blocklist Worker

Endpoints:
  GET /list     – current blocklist (Basic Auth)
  GET /refresh  – manual refresh (requires X-Worker-Secret header)