use `ipset swap` so blacklist is never empty

Thanks for the script, I just set it up on my openwrt router. Here's a small change that will create a temporary blacklist, then atomically swap the temporary blacklist with the main blacklist so the blacklist is never empty. It takes over a minute to update the blacklist on my router, so this helps a lot.