Fix HAProxy 3.0.11 compatibility issues

Major syntax and configuration updates for HAProxy 3.0.11:

Configuration Fixes:
- Remove conflicting stick-table declarations in frontend
- Move security tables to separate backend sections
- Fix ACL syntax errors (missing_browser_headers → separate ACLs)
- Remove unsupported add-var() syntax
- Simplify threat scoring to use flags instead of cumulative values

Security Table Architecture:
- security_blacklist: 24h persistent offender tracking
- wp_403_track: WordPress authentication failure monitoring
- Separated from main frontend table to avoid conflicts

Simplified Threat Detection:
- low_threat: Rate abuse, suspicious methods, missing headers
- medium_threat: SQL injection, directory traversal, WordPress brute force
- high_threat: Bot scanners, admin scans, shell attempts
- critical_threat: Blacklisted IPs, auto-blacklist candidates

Response System:
- Low threat: Warning headers only
- Medium threat: Tarpit delays
- High threat: Immediate deny (403)
- Critical threat: Blacklist and deny

Enhanced Compatibility:
- Removed HAProxy 2.6-specific syntax
- Updated to HAProxy 3.0.11 requirements
- Maintained security effectiveness with simpler logic
- Added security tables template integration

The system maintains comprehensive protection while being compatible
with HAProxy 3.0.11's stricter parsing and syntax requirements.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

haproxy_manager.py

@@ -1170,6 +1170,14 @@ def generate_config():
         # Add LetsEncrypt Backend
         letsencrypt_backend = template_env.get_template('hap_letsencrypt_backend.tpl').render()
         config_parts.append(letsencrypt_backend)
+
+        # Add Security Tables
+        try:
+            security_tables = template_env.get_template('hap_security_tables.tpl').render()
+            config_parts.append(security_tables)
+        except Exception as e:
+            logger.warning(f"Security tables template not found: {e}")
+
         # Add Default Backend
         try:
             default_backend = template_env.get_template('hap_default_backend.tpl').render()