Add FusionPBX configs: Yealink T48S provisioning + fail2ban whitelist

- y000000000000.boot: overwrite_mode=1 forces re-provision on every reboot
- BLF type=16 for Yealink T48S in FusionPBX (with pickup_value required)
- auto_linekeys.enable=0 prevents phone from overriding DSS key config
- fail2ban whitelist: 107.178.2.130 (office) + 97.154.109.245 (home WAN)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fusionpbx/fail2ban/jail.local

@@ -0,0 +1,10 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8 ::1 107.178.2.130 97.154.109.245
+
+[ssh]
+enabled  = true
+port     = 22
+protocol = ssh
+filter   = sshd
+logpath  = /var/log/auth.log
+action   = iptables-allports[name=sshd, protocol=all]