Block IPv4-mapped private addresses in outbound requests

Normalize mapped IPv6 addresses before applying the SSRF blocklist while preserving mapped public destinations.