[deploy] #10 Single disarm + blast-radius caps

[vxfemboy]

M1 (#167). One audited blackwalld disarm that withdraws all RTBH+FlowSpec+XDP without killing the daemon; hard caps + mandatory auto-expiry.
Status: PARTIAL (max_blackholes/hold_down/max_ttl enforced; process-kill = de-facto disarm) · Size: S/M · Home: blackwalld/rtbh.
Pro: a clear kill switch + a ceiling on false-positive damage. Con: small — add the audited CLI verb + FlowSpec caps.