…tion

The verifyIPTrusted function had a critical security vulnerability where it only
checked if the client IP exactly matched the network address of CIDR ranges,
rather than checking if the IP falls within the CIDR range.

Changes:
- Replace parsedIP.Equal(ip) with network.Contains(ip) for proper CIDR validation
- Improve error message to include the problematic CIDR string for better debugging
- Add comprehensive test coverage with 7 new test cases covering:
  * Single host CIDR ranges (/32)
  * Large CIDR ranges (/8, /16, /24)
  * Boundary testing (start/end of ranges)
  * Negative cases (IPs outside ranges)
  * Invalid CIDR format handling
  * Mixed CIDR scenarios
  * IPv6 CIDR support

Before: Only IPs that exactly matched the network address were trusted
After: All IPs within the specified CIDR ranges are properly validated

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>