Was removed in 3121fb2d but never recreated in spec.

- spec: bump to 0.11, add whitelist.txt to common package
- eterban.sh: add IPv6 whitelist check, improve check output
- eterban_api.py: fix whitelist check for IPv6 addresses

Replace hardcoded i_interface/i_interface2 slots with a loop over
wan_ifaces list. New i_interfaces option accepts comma/space-separated
list of interfaces. Old i_interface/i_interface2 config still works
as fallback for backwards compatibility.

- Switch from HTTPServer to ThreadingHTTPServer to prevent single
  client from blocking all connections
- Add 5s timeout on incoming connections (handler timeout)
- Add 5s socket_timeout on Redis to prevent hanging on unban
- Safe parsing of SO_ORIGINAL_DST result
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Checks IPv4/IPv6 ban lists, firehol and whitelist via ipset test.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>