NM-291: egress app pro restriction, add cidr validation (#4038)

* NM-291: feat(egress): add preset catalog API and server-side CIDR resolution

Introduce GET /api/v1/egress/presets with embedded extras plus generated AWS
region presets. Support optional preset_id on egress create/update to apply
catalog defaults and resolve CIDRs from AWS ip-ranges, GitHub meta, and Fastly
when available.

Add preset_id and static_domain_ans on schema.Egress; skip overwriting
domain_ans from host EgressUpdate when static_domain_ans is set. Add Jenkins
to extras catalog and tests for apply/resolvers and host guard.

Update swagger for preset_id, static fields, and presets endpoint.

* NM-291: add support for multiple domain in a single egress route

* NM-291: fix egress app domain updates

* NM-291: deprecate old egress domain field

* NM-291: add additional egress preset apps

* NM-291: rm wildcard domain from presets

* NM-291: rm preset server side resolution

* NM-291: rm unused funcs

* NM-291: fix site-to-site virtual addr routing

* NM-291: fix missing app domains

* Revert "NM-291: fix site-to-site virtual addr routing"

This reverts commit 32776811d2a97a8845b43f2fed47e150c7b2f134.

* NM-291: fix disabled nat mode

* NM-291: rm www from egress domains

* Revert "NM-291: rm www from egress domains"

This reverts commit 8a1d4cc439b2517a88605df2be56c8997de528a9.

* NM-291: add additional google domains

* NM-291: pre-fetch aws ips from source

* NM-291: fix tests

* NM-291: avoid trimming egress preset domains

* NM-291: add cidr validation, restrict egress app routing to pro only

* NM-291: fix cidr validation

* NM-291: normalize cidr before checking

* NM-291: fix tests

* NM-291: fix ce egress app checks

* NM-291: fix swagger