feat/shelly-firmware-source-cidr
main
shelly-manager-firmware (:8082, /fw/ only) accepted any world source. Shelly devices live on IoT; the LB is ETP=Local, so the client address reaches the pod. Refs S28-19 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>