Stable v2.9.27

• feat(webstats): add Visitors/Bytes detail to the Bots table
• fix(geoip): cap decompressed GeoIP DB size against a decompression bomb
• feat(webstats): bot filtering + fix empty Countries panel + timeout fix
• fix(security-advisor): fix PHP patch button layout — button now sits inline