Hub v0.6.0: Geo-restriction display + disable button + UUID cleanup

- Add geo-restriction section to customer detail page (status, countries,
  per-app overrides, sync state, errors)
- Add "Összes geo-korlátozás eltávolítása" button that directly calls
  Cloudflare API to delete [felhom-geo] WAF rules (bypasses blocked tunnel)
- Background retry to notify controller to disable geo in settings
- New internal/cloudflare/unblock.go — minimal CF client for rule deletion
- Remove legacy Monitoring UUIDs from config form, buildConfigJSON,
  handlePullConfig, volatileKeys, and controller.yaml.default

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

hub/internal/web/templates/customer_unified.html

@@ -226,6 +226,76 @@
             {{end}}
         </section>
 
+        <!-- Geo-restriction -->
+        {{if .HasReports}}
+        {{with .Report.geo_restriction}}
+        <section class="card">
+            <h2>Geo-korlátozás</h2>
+            <div class="info-grid">
+                <div class="info-item">
+                    <span class="label">Állapot</span>
+                    <span class="value">
+                        {{if index . "enabled"}}
+                            <span class="severity-badge severity-critical">Aktív</span>
+                        {{else}}
+                            <span class="severity-badge severity-ok">Inaktív</span>
+                        {{end}}
+                    </span>
+                </div>
+                {{if index . "enabled"}}
+                <div class="info-item">
+                    <span class="label">Engedélyezett országok</span>
+                    <span class="value">
+                        {{$countries := index . "allowed_countries"}}
+                        {{if $countries}}
+                            {{range $i, $c := $countries}}{{if $i}}, {{end}}{{$c}}{{end}}
+                        {{else}}
+                            —
+                        {{end}}
+                    </span>
+                </div>
+                {{end}}
+                {{if index . "last_sync"}}
+                <div class="info-item">
+                    <span class="label">Utolsó szinkron</span>
+                    <span class="value">{{index . "last_sync"}}</span>
+                </div>
+                {{end}}
+                {{if index . "last_sync_error"}}
+                <div class="info-item">
+                    <span class="label">Szinkron hiba</span>
+                    <span class="value" style="color: #f87171">{{index . "last_sync_error"}}</span>
+                </div>
+                {{end}}
+            </div>
+            {{$overrides := index . "app_overrides"}}
+            {{if $overrides}}
+            <h3 style="margin-top: 1rem; font-size: 0.95rem;">Alkalmazás felülírások</h3>
+            <table class="data-table" style="margin-top: 0.5rem;">
+                <thead><tr><th>Alkalmazás</th><th>Engedélyezett országok</th></tr></thead>
+                <tbody>
+                {{range $app, $override := $overrides}}
+                <tr>
+                    <td>{{$app}}</td>
+                    <td>
+                        {{$ac := index $override "allowed_countries"}}
+                        {{if $ac}}{{range $i, $c := $ac}}{{if $i}}, {{end}}{{$c}}{{end}}{{else}}—{{end}}
+                    </td>
+                </tr>
+                {{end}}
+                </tbody>
+            </table>
+            {{end}}
+            {{if index . "enabled"}}
+            <div style="margin-top: 1rem;">
+                <button class="btn btn-danger" id="btn-geo-disable" onclick="disableGeo('{{$.Customer.CustomerID}}')">Összes geo-korlátozás eltávolítása</button>
+                <span id="geo-msg" style="display:none; margin-left: 0.75rem;"></span>
+            </div>
+            {{end}}
+        </section>
+        {{end}}
+        {{end}}
+
         <!-- Infra Backup -->
         <section class="card">
             <h2>Infra Backup</h2>
@@ -595,6 +665,38 @@
         });
     }
 
+    function disableGeo(customerID) {
+        if (!confirm('Összes geo-korlátozás eltávolítása?\n\nEz közvetlenül törli a Cloudflare WAF szabályokat és értesíti a controllert.')) return;
+        var btn = document.getElementById('btn-geo-disable');
+        var msg = document.getElementById('geo-msg');
+        btn.disabled = true;
+        btn.textContent = 'Eltávolítás...';
+        msg.style.display = 'none';
+        fetch('/customers/' + customerID + '/geo/disable', {method: 'POST', headers: csrfHeaders()})
+        .then(function(r) { return r.json(); })
+        .then(function(data) {
+            if (data.ok) {
+                msg.textContent = data.message || 'Geo-korlátozás eltávolítva';
+                msg.style.display = 'inline';
+                msg.style.color = '#4ade80';
+                setTimeout(function() { location.reload(); }, 2000);
+            } else {
+                msg.textContent = data.error || 'Hiba történt';
+                msg.style.display = 'inline';
+                msg.style.color = '#f87171';
+                btn.disabled = false;
+                btn.textContent = 'Összes geo-korlátozás eltávolítása';
+            }
+        })
+        .catch(function() {
+            msg.textContent = 'Kapcsolódási hiba';
+            msg.style.display = 'inline';
+            msg.style.color = '#f87171';
+            btn.disabled = false;
+            btn.textContent = 'Összes geo-korlátozás eltávolítása';
+        });
+    }
+
     function triggerControllerUpdate(customerID) {
         if (!confirm('Trigger self-update on this controller?\n\nThe controller will be briefly unavailable during restart.')) return;
         var btn = document.getElementById('btn-trigger-update');