ZeroAds blocklist service

Static endpoints used by the ZeroAds mobile app to fetch its blocklists. Public read-only: /api/manifest.json, /lists/*.txt. Nothing user-identifying is served here.