nuisance: 24 new blocks 09-07 (backlog of missed runs) + path/env fixes

Sweep checkout path moved to ~/projects/KNEL/KNELPFVCluster; creds now
accepted from env (vault/sm-ready) since ~/.creds textfiles retired.

Redmine: https://projects.knownelement.com/issues/796#note-134

perf/nuisance/blocklist.txt

@@ -3,14 +3,11 @@
 #   GET/POST https://my.knownelement.com/api/v1/network/blocklist (admin token)
 #   panel: Network > IP block list; enforced via ipset cloudron_blocklist on
 #   INPUT(CLOUDRON) + FORWARD(DOCKER-USER); Cloudron re-applies at boot.
-# This file mirrors the live setting (last sync 2026-09-04 12:15 CDT, #796).
+# This file mirrors the live setting (last sync 2026-09-07 09:09 CDT, #796).
 # Full-line comments allowed in both.
-
-# founder-directed 2026-09-04 (#796, #787 root cause): hostile SMTP ranges
+# sweep-added 2026-09-07 (#796 auto: spamhaus-DENY sources, hits>=3) — 24 sources, backlog of missed 09-05..09-06 runs
 92.118.39.0/24
 80.94.92.0/24
-
-# sweep-added 2026-09-04 (#796 auto: spamhaus-DENY sources, hits>=MIN_HITS)
 213.176.24.83
 193.32.162.9
 193.32.162.71
@@ -64,4 +61,27 @@
 45.164.115.86
 46.44.0.185
 61.37.150.6
-
+141.98.10.16
+213.177.179.12
+213.177.179.126
+157.66.225.224
+71.6.167.142
+147.185.132.74
+189.188.15.8
+147.185.132.83
+162.216.150.47
+207.175.57.177
+173.207.70.42
+185.93.89.118
+45.172.139.167
+68.183.177.121
+103.62.238.130
+124.160.45.26
+158.94.210.8
+179.184.85.167
+187.8.120.90
+211.58.176.42
+27.115.113.138
+31.173.29.136
+77.90.185.238
+95.105.52.153