fix(admin): Greptile follow-ups from #941 #985

Description:

Follow-up on merged admin moderation (#941). Address Greptile review items: lock settings updates across workers, use first_seen for activity stats, normalize IPv6 bypass addresses, reject reversed kind ranges, and return saved limits from PATCH/actions responses.