Name request log actions so they say what they mean (closes #229)

Rename too_large, rate_limited, rule_blocked and denied, and split banned
into temporarily_banned and permanently_banned by whether the ban runs out.
A request that makes a ban permanent gets permanently_banned. A ban rule, a
trap path or a CrowdSec decision gets the value for the ban it makes, and in
observe mode would_action names the ban enforce mode would have made.

The offence kind rule_blocked follows, as a metric label and a key in
clients.json.

Model: opus-5-5

internal/discriminator/lookup_test.go

@@ -40,7 +40,7 @@ func TestEveryClientIsLookedUpWithoutWaitingWhileNoSettingNeedsIt(t *testing.T)
 	// comes too. None waits for GeoJS.
 	for _, line := range []logLine{
 		s.get(fromDE, http.StatusOK, requestlog.ActionForward),
-		s.get(fromDE, http.StatusForbidden, requestlog.ActionRateLimited),
+		s.get(fromDE, http.StatusForbidden, requestlog.ActionClientIsRateLimited),
 		s.get(fromKP, http.StatusOK, requestlog.ActionForward),
 	} {
 		got := asnAndCountry{line.ASN, line.ASName, line.Country}
@@ -179,7 +179,7 @@ func TestASNumberAndNameInTheLogLineTheHistoryTheBanNotesAndTheAlert(t *testing.
 
 	for _, line := range []logLine{
 		s.get(fromDE, http.StatusOK, requestlog.ActionForward),
-		s.get(fromDE, http.StatusForbidden, requestlog.ActionRateLimited),
+		s.get(fromDE, http.StatusForbidden, requestlog.ActionClientIsRateLimited),
 	} {
 		if got := (asnAndCountry{line.ASN, line.ASName, line.Country}); got != want {
 			t.Errorf("log line has %+v, want %+v", got, want)
@@ -264,7 +264,7 @@ func TestClientsAreLookedUpInTheLookupDatabaseAndGeoJSIsNotAsked(t *testing.T) {
 		want asnAndCountry
 	}{
 		{s.get(fromDE, http.StatusOK, requestlog.ActionForward), de},
-		{s.get(fromDE, http.StatusForbidden, requestlog.ActionRateLimited), de},
+		{s.get(fromDE, http.StatusForbidden, requestlog.ActionClientIsRateLimited), de},
 		{
 			s.get(fromKP, http.StatusForbidden, requestlog.ActionCountryDenied),
 			asnAndCountry{asnKP, asNameKP, "KP"},