Stable v2.9.32

• fix(waf): rotate the ModSecurity audit log with copytruncate
• feat(waf): add search and sort to log table
• fix(waf): don't name nginx in user-facing text, clarify detection-only
• fix(waf): surface unsaved changes + turn paranoia level into level cards
• feat(waf): show a table for active exceptions (added/rule/description)
• fix(waf): split Ausnahmeregeln into settings/active-exceptions/table boxes
• feat(waf): merge Learning Mode into Ausnahmeregeln as one compact table
• fix(waf): learning-mode hint pointed to the wrong tab location
• fix(waf): flag the live-blocking state red, not the safe one
• feat(waf): clarify detection-only switch state + multi-rule hint
• feat(waf): learning mode with path-scoped rule exceptions