Trusted IPs (localhost, pod network) now skip the entire DDoS/scanner/ rate-limit pipeline via early return. Fixes buildkitd pushes to Gitea being blocked by the scanner when using host networking. Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>