fix(ip-geo): harden full-chain IP geolocation reliability

Capture real client IPs behind CDN, improve provider fallbacks and
negative cache, fix admin credential dependsOn for polling mode, and
map country labels to ISO codes for moderation GeoIP blocks.

src/AKSRT/Settings/ExtensionRuntime.php

@@ -53,19 +53,20 @@ class ExtensionRuntime {
             $provider = 'null';
         }
 
-        $display_raw = $settings['ip_geo_display'] ?? ['comment', 'user_home', 'user_center', 'post'];
-        $display = is_array($display_raw) ? $display_raw : [];
         $allowed_display = ['comment', 'user_home', 'user_center', 'post'];
-        $display_norm = [];
-        foreach ($display as $item) {
-            $key = sanitize_key((string) $item);
-            if (in_array($key, $allowed_display, true) && !in_array($key, $display_norm, true)) {
-                $display_norm[] = $key;
-            }
-        }
-        // Empty / missing → full four surfaces (canonical default).
-        if ($display_norm === []) {
+        // Only fill defaults when the key was never saved — empty array means "none".
+        if (!array_key_exists('ip_geo_display', $settings)) {
             $display_norm = $allowed_display;
+        } else {
+            $display_raw = $settings['ip_geo_display'];
+            $display = is_array($display_raw) ? $display_raw : [];
+            $display_norm = [];
+            foreach ($display as $item) {
+                $key = sanitize_key((string) $item);
+                if (in_array($key, $allowed_display, true) && !in_array($key, $display_norm, true)) {
+                    $display_norm[] = $key;
+                }
+            }
         }
 
         $format = sanitize_key((string) ($settings['ip_geo_format'] ?? 'province_city'));