The project's own domains (f0xx.org and *.f0xx.org) resolve to
private/internal IPs inside the cluster network, causing the SSRF
guard to block legitimate shortening requests for internal services
such as Alertmanager notifications. Add an explicit early-return
for f0xx.org and sub-domains before the private-IP check.
Co-authored-by: Cursor <cursoragent@cursor.com>
