Expand country blocking to more high-risk countries

- Add IN, VN, BR, TR, ID, TH, BD, PK, RO to blocked list
- Update alternative IP ranges for new countries in script
- Enhance documentation with rationale, risk assessment, and best practices
- Add test script for verifying country blocking functionality
- Improve Ansible tasks for dependency installation

config/ansible/tasks/servers/services/caddy/country-blocking.yml

@@ -2,16 +2,17 @@
 - name: Country blocking setup for Caddy
   block:
     - name: Ensure Python requests module is installed
-      ansible.builtin.pip:
-        name: requests
+      ansible.builtin.apt:
+        name: python3-requests
         state: present
+        update_cache: yes
       when: enable_country_blocking | default(false)
 
     - name: Copy country blocking script
       ansible.builtin.copy:
         src: generate_country_blocks.py
         dest: "{{ caddy_service_dir }}/generate_country_blocks.py"
-        mode: '0755'
+        mode: "0755"
       when: enable_country_blocking | default(false)
 
     - name: Generate country IP ranges