dos: Avoid blacklisting Exit relays
It is possible to do "tor-in-tor" meaning a tor client connection can exit the network and come back at a Guard node.
And if this happens to be detected by the DoS subsystem, we'll blacklist the Exit relay for a while. That is NOT good.
Now that we have #25183 (moved), we can lookup the inbound address to learn if we know it. And if we do, don't consider it a potential malicious client that we need to look at.
That is one part of the solution, the second part is #2667 (moved) so we actually prevent reentry from Exit but that part won't be backported just yet (if ever).
This work will be part of #24902 (moved) so once merge_ready, it will be merged into my branch