- add sing-box, nftables, and systemd deployment templates - document external GeoIP rule-set setup Co-authored-by: CommandCodeBot <noreply@commandcode.ai>