chore: allow re-including Cloudflare and PaloAlto whitelist seeds in app/data

.gitignore

@@ -14,7 +14,11 @@ __pycache__/
 .venv/
 
 # app runtime data (feeds, caches, scan state - regenerated each run)
-app/data/
+# matched per-entry (not as a directory) so the whitelist seed files
+# for Cloudflare and PaloAlto below can be re-included
+app/data/*
+!app/data/cloudflare/
+!app/data/paloalto/
 
 # generated reports
 app/reports/

app/data/paloalto/.gitkeep

@@ -0,0 +1 @@
+$ = paloalto

app/data/paloalto/scanner-ips.txt

@@ -0,0 +1,12 @@
+35.203.210.0/23
+144.86.173.0/24
+147.185.132.0/23
+162.216.149.0/24
+162.216.150.0/24
+172.105.147.0/24
+198.235.24.0/24
+205.210.31.0/24
+216.25.88.0/21
+2604:a940:300:5b6:0:0:0:0/64 
+2604:a940:301:225:0:0:0:0/64 
+2604:a940:302:118:0:0:0:0/64