Function classify_host 

pub async fn classify_host(
    host: &str,
    session: &WebFetchSessionConfig,
) -> SsrfDecision

Resolve the host and run the IP classifier against each result. Returns Blocked if any resolved IP lands in a range not opted into.