Threat control LWRP

Cf. first commit and README changes:

Add a threat_control LWRP, allowing to whitelist/blacklist IPs on CloudFlare
* Stores last action in a node attribute cache, CF API is only called once per day, or if status changes
* IP attribute defaults to current's node IP address
Oh and btw, would rather have the log line read 'nothing to do' rather than 'ignoring'; sounds more accurate to me :-)