feat: global IP/CIDR/UA whitelist bypassing all restrictions

- class-itk-whitelist.php: static class with 5min transient cache,
  supports exact IP, CIDR notation, and ua: prefix for UA substrings
- config/whitelist.conf: editable config file (template with examples)
- whitelist check added to bot-blocker, WAF, protection (4 methods),
  and honeypot validator — matched requests skip all ITK enforcement
- admin: whitelist.conf added to Config Files editor tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

config/whitelist.conf

@@ -0,0 +1,14 @@
+# InformatiQ Toolkit – Global IP/UA Whitelist
+# Entries in this file bypass ALL plugin restrictions (bot blocker, WAF, honeypot, protection).
+#
+# IP/CIDR entries (one per line):
+# 1.2.3.4
+# 10.0.0.0/8
+# 192.168.1.0/24
+#
+# User-Agent substring entries (prefix with ua:):
+# ua:Googlebot
+# ua:Bingbot
+# ua:MyMonitoringTool
+#
+# Lines starting with # are comments. Blank lines are ignored.