feat: add container network filtering, enhance IP address display, and improve workload insights UI

Add is_docker_or_container_network helper to detect Docker bridge, Kubernetes CNI, and loopback networks, implement cleanup_discovered_container_networks to remove container bridge IPs from discovered networks during IPAM discovery, add ip_address_payload helper to enrich IP addresses with subnet CIDR and workload details, update ProxmoxProvider to ignore guest interfaces matching common container pref

backend/app/schemas/domain.py

@@ -210,9 +210,12 @@ class SubnetRead(OrmModel):
 class IpAddressRead(OrmModel):
     id: str
     subnet_id: str
+    subnet_cidr: str | None = None
     address: str
     status: str
     workload_id: str | None
+    workload_name: str | None = None
+    workload_external_id: str | None = None
     note: str | None
 
 
@@ -263,6 +266,7 @@ class PolicyRead(OrmModel):
 
 class WorkloadInsight(BaseModel):
     workload: WorkloadRead
+    assigned_ips: list[IpAddressRead]
     traffic: list[dict[str, Any]]
     matching_policies: list[PolicyRead]
     effective_decision: str