Threat control LWRP

Cf. first commit and README changes:

Add a threat_control LWRP, allowing to whitelist/blacklist IPs on CloudFlare
* Stores last action in a node attribute cache, CF API is only called once per day, or if status changes
* IP attribute defaults to current's node IP address
I'd rather have that in minutes than days, and I'm much rather have that as a node attribute rather than a hard-coded constant.