feat: integrate Coraza WAF with full UI and event logging

- Add coraza-caddy/v2 to Caddy Docker build
- Add waf_events + waf_log_parse_state DB tables (migration 0010)
- Add WafSettings type and get/save functions to settings
- Add WafHostConfig/WafMode types to proxy-hosts model
- Add resolveEffectiveWaf + buildWafHandler to caddy config generation
- Create waf-log-parser.ts: parse Coraza JSON audit log → waf_events
- Add WafFields.tsx per-host WAF UI (accordion, mode, CRS, directives)
- Add global WAF settings card to SettingsClient
- Add WAF Events dashboard page with search, pagination, severity chips
- Add WAF Events nav link to sidebar

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/components/proxy-hosts/HostDialogs.tsx

@@ -20,6 +20,7 @@ import { SettingsToggles } from "./SettingsToggles";
 import { UpstreamDnsResolutionFields } from "./UpstreamDnsResolutionFields";
 import { UpstreamInput } from "./UpstreamInput";
 import { GeoBlockFields } from "./GeoBlockFields";
+import { WafFields } from "./WafFields";
 
 export function CreateHostDialog({
     open,
@@ -128,6 +129,7 @@ export function CreateHostDialog({
                 <DnsResolverFields dnsResolver={initialData?.dns_resolver} />
                 <UpstreamDnsResolutionFields upstreamDnsResolution={initialData?.upstream_dns_resolution} />
                 <GeoBlockFields />
+                <WafFields value={initialData?.waf} />
             </Stack>
         </AppDialog>
     );
@@ -231,6 +233,7 @@ export function EditHostDialog({
                     geoblock_mode: host.geoblock_mode,
                   }}
                 />
+                <WafFields value={host.waf} />
             </Stack>
         </AppDialog>
     );