banip: update 1.8.9-2

banip: update 1.8.9-2

default feed updates:
- urlhaus, urlvir, webclient: switched from in to out
  and added a tcp udp 80 443 port limit (destination feeds for LAN-initiated traffic)
- feodo, spamhaus, threat, threatview, proxy, tor, vpn, vpndc: switched from in to inout
- threatview: added url_6, as the source ships IPv4 and IPv6 in a single file
- country / asn: intentionally left on in; documented how to switch them to outbound/both
  for the recurring "block connections to country X" case
- readme update:
  - corrected the feed table to match the above,
  - removed the stale drop row (replaced by spamhaus),
  - and reworked the chain explanation to clarify the inbound-vs-outbound (source-IP vs destination-IP) model
  - significantly expanded the custom-feeds section (all JSON fields, rule parameters, etc.

Signed-off-by: Dirk Brenken <redacted>