API rejects private network targets
Targets that resolve to a private network range now return a 400 with a clear validation error instead of being forwarded. The check runs before any request goes out and covers reserved IPv4 and IPv6 blocks. If you accidentally pass an internal hostname, you'll see a clean error right away. Same behavior across Single, Proxy Finder, and Browser.