feat(security): add darklist.de source and raise the blocklist cap to 1M

scripts/blocklists-sync.sh

@@ -27,6 +27,8 @@ DEFAULT_SOURCES=(
   "https://feodotracker.abuse.ch/downloads/ipblocklist.txt"
   "https://sslbl.abuse.ch/blacklist/sslipblacklist.txt"
   "https://www.botvrij.eu/data/ioclist.ip-dst.raw"
+  # Live SSH/spam attackers (last 48h), bare IPs only
+  "https://www.darklist.de/raw.php"
   # Aggregated threat intel
   "https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt"
   "https://raw.githubusercontent.com/stamparm/ipsum/master/levels/2.txt"