Ties gitshallow, httpcache, geoip, ipcohort, and sync/dataset together
into a single tool that resolves an IP against the configured blocklist
and GeoIP databases, with optional --serve mode for production use.
Flags: --git, --blocklist, --whitelist, --geoip-conf, --serve,
--async-load, --format pretty|json, plus -V/--version and help.
Includes /healthz, http.Server timeouts, and stage-timing logs to stderr.
