Client country and per-feature availability

Resolves the client country (Cloudflare header, then IP database) and returns which features are available there. Unknown country fails open: country: null with all features true. Response must never be shared-cached (Cache-Control: private, no-store).