Add best-effort geolocation to the IP lookup from geojs and DB-IP City Lite (closes #239)

Every IP lookup result gains `geo`. One request to geojs carries all uncached addresses of a lookup, within 1 second. On a timeout, an error or an answer with no location, the lookup reads DB-IP City Lite, downloaded monthly into the state directory. Geojs answers stay in memory, at most 250,000, and in `cache.db` for 7 days. The home page footer credits DB-IP.

Judgement call: a reserved address goes to neither source, and its `geo` is null.
Judgement call: `updated` for a DB-IP answer is when the copy was downloaded.
Deviation: the cache is SQLite, by sneak's words, not the JSON file the standing rule asks for.

Model: opus-5-5

TODO.md

@@ -53,6 +53,10 @@ problem the run finds.
 
 # Completed Steps
 
+- 2026-11-10: each result of the IP lookup has `geo`, where the address is. It
+  comes from geojs, with DB-IP's City Lite database as the fallback. The geojs
+  answers stay in memory and in `cache.db` for 7 days (closes
+  https://git.eeqj.de/sneak/routewatch/issues/239).
 - 2026-11-10: the IP lookup checks the `icloud_private_relay` list of Apple's
   iCloud Private Relay networks, downloaded once a day. Each result has
   `flags.is_relay` (closes https://git.eeqj.de/sneak/routewatch/issues/237).