iana: Embed & parse reserved IP registries from primary source

[jprenken]

Move policy.IsReservedIP to iana.IsReservedAddr.

Move policy.IsReservedPrefix to iana.IsReservedPrefix.

Embed & parse IANA's special-purpose address registries for IPv4 and IPv6 in their original CSV format.

Fixes #8080

[aarongable]

nit: this probably shouldn't close 8080, since it doesn't auto-update our copy of the registry yet. Let's either do that here, or leave 8080 open and leave a TODO in the action yml file.

[aarongable]

The structure of the update job looks good, but workflows are hard to review. Can you push this branch to your personal fork of the boulder repo, make the checked-in files out-of-date, and then run the workflow and link to the resulting run and PR here?

[jprenken]

The structure of the update job looks good, but workflows are hard to review. Can you push this branch to your personal fork of the boulder repo, make the checked-in files out-of-date, and then run the workflow and link to the resulting run and PR here?

Sure thing! I had to modify the one line that sets the PR reviewer. Here are the results:

• https://github.com/jprenken/boulder/actions/runs/15767225960/job/44445863473
• https://github.com/jprenken/boulder/pull/3

I did one test run before remembering to make the checked-in files out of date and, delightfully, caught a real correction that IANA must have made within the past few days.

[beautifulentropy]

A really neat change that I had a lot of fun reading through. Just some small comments, but otherwise I think it looks great!

[beautifulentropy]

We typically declare these outside of a function so that they fail at compilation time.

[aarongable]

Note that this doesn't make a difference in this case.

Putting them outside the function doesn't cause them to fail at compilation time, rather it causes them to fail at package loading time, i.e. startup time. But this function is called from init(), so a failure here would also be caught at startup time.