Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

Restore user website from backups, reject IPv4 forms browsers parse

SetMetas restored only the subscription email, so a native export
imported into an empty store lost every website. It now restores the
website too, whether USER_WEBSITE is on or off, and an invalid value
is reported instead of dropped.

NormalizeWebsite accepted hosts like 127.1, 0x7f.0.0.1 or 0177.0.0.1,
which browsers read as IPv4. The host is now mapped to ASCII like
browsers do and rejected when its last label is a number, and the
frontend skips links whose parsed host is an IP or localhost.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>