portscan module skip tags option

[liquidsec]

Summary

Adds a skip_tags option to the portscan module. When configured (e.g. cdn,waf), events with matching tags are excluded from masscan, and speculate fills the gap by emitting its configured ports for those skipped events.

Closes the gap that #3075 was reaching for, without putting emission logic inside filter_event or making portscan synthesize ports itself. Design:

• portscan only scans; never emits assumed-open ports.
• speculate's emit decision becomes per-event: it always emits when no active portscanner exists (today's behavior), and additionally emits for events the active portscanner would skip.
• speculate consults portscan.would_skip(event), which is a small public method on the portscan module. The relationship is the same shape as today's "is portscan enabled?" check, just sharpened to "is portscan going to scan this event?"

Default skip_tags="" means today's behavior is unchanged.

[liquidsec]

supercedes #3075

[github-actions]

🚀 Performance Benchmark Report

⚠️ No current benchmark data available

This might be because:

• Benchmarks failed to run
• No benchmark tests found
• Dependencies missing

[codecov]

Codecov Report

❌ Patch coverage is 96.92308% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 90%. Comparing base (0fbe70a) to head (151d32c).

Files with missing lines	Patch %	Lines
...t/test_step_2/module_tests/test_module_portscan.py	96%	2 Missing ⚠️

Additional details and impacted files

@@          Coverage Diff          @@
##             dev   #3118   +/-   ##
=====================================
+ Coverage     90%     90%   +1%     
=====================================
  Files        445     445           
  Lines      38727   38786   +59     
=====================================
+ Hits       34653   34706   +53     
- Misses      4074    4080    +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.