Add Envoy RBAC xDS integration for dynamic IP blocking ...

Introduces a blocked_ips table, REST endpoints (GET/POST /blocks,
POST /remove-block), and RBAC network filter injection so NetWatch
auto-blocks propagate to all Envoy listener filter chains in real time.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Register proxy_protocol and tls_inspector listener filter proto types ...

Required for protojson.Unmarshal to resolve @type fields when loading
listeners that include these filter configs via the control plane API.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Register FileAccessLog proto type for protojson Any resolution ...

Without this blank import, protojson.Unmarshal fails to resolve
@type: .../envoy.extensions.access_loggers.file.v3.FileAccessLog
when it appears inside typed_config Any fields, causing the
add-listener API to return 400 for any listener config containing
access_log entries.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Fix: Corrected syntax error in sqlite.go ScanRawRow function and staged all modified files

fix some logic error

add extension config section

add secret manipluation

refactor code