- Switch from HTTPServer to ThreadingHTTPServer to prevent single
  client from blocking all connections
- Add 5s timeout on incoming connections (handler timeout)
- Add 5s socket_timeout on Redis to prevent hanging on unban
- Safe parsing of SO_ORIGINAL_DST result
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>