feat(ap): log source IP on dropped/rejected/ignored inbox hits
So an operator can see WHO is probing their fediverse inbox (e.g. unsigned/unknown
activities like Block/View). Uses req.ip (real client behind the proxy via trust
proxy). Added to the blocked, signature-rejected and ignored log lines:
[AP] inbox Block -> boiert from 1.2.3.4 (ignored)
No behavior change — visibility only.
Co-Authored-By: Claude <noreply@…>