Add IP allowlist entries for production engineers before broadcast

Your allowlist requests arrive as table rows, causing stalled remote video connections and delayed broadcasts. It delivers validated CIDR entries to firewall groups so connections are enabled before the next broadcast.