Share the excluded-ranges filter with IP Addresses; add Admin Links page

IP Addresses (IPAM) now reads the same excluded-ranges setting the
Consistency page manages, so "not interesting" addresses - a Docker
bridge network repeating on every host, say - can be hidden there too.
Adds a "Hide excluded addresses" toggle (on by default, with a live
count), an inline ranges editor matching Consistency's, an "excluded"
badge on rows shown anyway, and a per-row "Exclude..." shortcut that
suggests a /24 (or /64 for IPv6) around that address. Editing ranges
from either page updates both, since it's one shared setting.

Also adds Operations > Admin Links: a single page summarizing every
admin bookmark added across all servers (Dockge, Webmin, Cockpit, etc,
previously only visible per-server on each server's own detail page),
sortable and searchable, with the same add/edit/delete capability -
adding one here just asks which server it belongs to.

Verified both with real HTTP-level tests: a genuine Express app, a
scratch SQLite DB, and forged sessions, covering the exclusion
matching, the shared-setting round trip, the links aggregation and
join, and role enforcement - the real dev DB was confirmed untouched
throughout. Both packages build clean.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

ROLES.md

@@ -40,6 +40,7 @@ page's own top-level link.
 | Maintenance | `/maintenance` | ✅ | ✅ | ✅ |
 | Uptime Kuma | `/uptime-kuma` | ✅ | ✅ | ✅ |
 | osTicket | `/osticket` | ✅ | ✅ | ✅ |
+| Admin Links | `/admin-links` | ✅ | ✅ | ✅ |
 | Generator | `/generator` | ✅ | ✅ | ✅ |
 | **Administration** | | | | |
 | Integrations | `/integrations` | ✅ | ✅ | ✅ |
@@ -74,6 +75,9 @@ even further, to admin only:
   admin-only (applying an existing tag to a server needs operator).
 - **Ports**: everyone can see both the agent-reported and manual tables;
   adding, editing, or deleting a manual port opening needs operator.
+- **Admin Links**: everyone can see and open every server's admin
+  bookmarks, from that server's own page or the summary page; adding,
+  editing, or removing one needs operator, from either place.
 - Everything under **Settings** (notification channels, badge colors,
   display prefs, log retention, backup/restore) is admin-only, matching
   the page itself being admin-only.