feat: add auth0_managed curated blocklists to network ACL rules (EA only)

[bkiran6398]

🔧 Changes

Adds support for Auth0-curated blocklists as network ACL match criteria.

New flag on network-acl create and network-acl update:

• --auth0-managed - comma-separated list of Auth0-curated blocklists

Available as auth0_managed inside both match and not_match when passing --rule JSON, and as an Auth0 Managed option in the interactive rule builder.

auth0 network-acl create -d "Curated Blocklist" -p 6 --active true \
  --rule '{"action":{"block":true},"scope":"tenant","match":{"auth0_managed":["auth0.low_reputation"]}}'

Display fixes

Two pre-existing bugs in the network ACL detail view are fixed here, because the new rows could not render without them:

• Rule detail rows never displayed. A type assertion in the view never matched, so show, create, and update silently dropped every rule detail (scope, redirect URI, country codes, CIDRs, ASNs, fingerprints, user agents). These now render.
• Removed a redundant NOT MATCH true row. The NOT prefix on each label already conveys the rule type.

--json output is unchanged.

This is an Early Access feature and requires the flag to be enabled on the tenant.

🔬 Testing

Automated

• Unit tests for flag parsing and rule building, covering auth0_managed in match and not_match, and combined with other criteria.
• Unit tests for the rendered detail rows and for the JSON output contract, including that id is always present.
• Integration test cases updated for the rule detail rows that now render.

Manual

Requires a tenant with the Early Access feature enabled.

auth0 network-acl create -d "Curated Blocklist" -p 6 --active true \
  --rule '{"action":{"block":true},"scope":"tenant","match":{"auth0_managed":["auth0.low_reputation"]}}'
auth0 network-acl show <id>
auth0 network-acl show <id> --json
auth0 network-acl delete <id> --force

Also verified the interactive path by running auth0 network-acl create with no flags and selecting Auth0 Managed.

📝 Checklist

• All new/changed/fixed functionality is covered by tests (or N/A)
• I have added documentation for all new/changed functionality (or N/A)