outline: split to iron-kr-nowaf pull zone, restore iron-kr WAF rules

Created new Bunny pull zone iron-kr-nowaf (ID 5720695) without Shield to
host outline.inouter.com exclusively. Uploaded *.inouter.com wildcard cert
from cert-manager since Bunny LE auto-provision kept returning invalid.
Restored 7 CRS rules (942100,932230/235/260/370/380,933160) on iron-kr
Shield so vault/n8n/telegram-webhook/jarvis regain protection.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

services/bunnycdn-security.md

@@ -63,7 +63,8 @@ tags: [cdn, bunnycdn, security, crowdsec, edge-script]
 | iron-kr | `jarvis.inouter.com` | |
 | iron-kr | `telegram-webhook.inouter.com` | |
 | iron-kr | `vault.inouter.com` | |
-| iron-kr | `outline.inouter.com` | |
+| iron-kr-nowaf | `iron-kr-nowaf.b-cdn.net` | ✅ |
+| iron-kr-nowaf | `outline.inouter.com` | (WAF 제외용, 2026-04-21 이전) |
 | iron-jp | `iron-jp.b-cdn.net` | ✅ (시스템만 남음, 사용자 호스트 전부 제거 2026-04-17) |
 | iron-kr-waf | `iron-kr-waf.b-cdn.net` | ✅ |
 | iron-kr-waf | `juiceshop.keepanker.cv` | |