Ban list lost the player country flag in 2.0 #49

Summary

Since the move to SourceBans++ 2.0, the public ban list no longer shows the player's country flag. In 1.x every row had a small flag next to the player, resolved from the ban IP.

What still exists

The backend never went away:

• FetchIp() looks up the bundled MaxMind DB (web/data/GeoLite2-Country.mmdb).
• The flag set ships in web/images/country/*.png.
• page.banlist.php still resolves the country, caches it in :prefix_bans.country, and builds $data['country'].
• The SourceMod plugin still writes country on insert.
• banlist.nocountryfetch is still in Settings as "Skip country lookup for IPs".

But page_bans.tpl (2.0 rewrite) never renders the flag, so the setting has no visible effect. The player drawer only shows the raw code as plain text, and it does so whatever the setting says.

Expected

• A flag next to the player name on the ban list (desktop table and mobile cards), with the country name on hover.
• A flag and country name in the player drawer.
• A clear on/off toggle in Settings > Main > Ban list.
• When the toggle is off, there is no lookup and no flag anywhere (ban list, drawer, bans.detail JSON).

Notes

• :prefix_bans.country is also written by the plugin, so it must be validated before it reaches HTML. Today the raw value is concatenated into an <img> tag.
• Keep the existing banlist.nocountryfetch key (REST /settings, data.sql, no migration). Only the form label changes to a positive "Show player country flags".