[Ingest] Route scraping through an optional V2Ray/Xray proxy (Telegram in Iran)

Telegram and some sources are filtered in Iran. .NET cannot speak vmess/vless/trojan, so add an Xray sidecar (compose service 'xray', behind the 'proxy' profile) that converts the admin's config into a local SOCKS5 proxy (xray:10808). New ScrapeHttpClients provider builds a proxied or direct HttpClient (WebProxy supports socks5/socks4/http) cached per proxy URL; all five ingestion sources (Telegram/Bale/Divar/Medjobs/Websites) now use it. Admin settings gain IngestProxyEnabled + IngestProxyUrl (migration; UI under sources). Added deploy/xray/config.json template + README with vmess/vless/trojan examples.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/JobsMedical.Web/Services/Scraping/BaleListingSource.cs

@@ -10,12 +10,12 @@ namespace JobsMedical.Web.Services.Scraping;
 public class BaleListingSource : IListingSource
 {
     private const string BaseUrl = "https://tapi.bale.ai";
-    private readonly IHttpClientFactory _http;
+    private readonly ScrapeHttpClients _clients;
     private readonly ILogger<BaleListingSource> _log;
 
-    public BaleListingSource(IHttpClientFactory http, ILogger<BaleListingSource> log)
+    public BaleListingSource(ScrapeHttpClients clients, ILogger<BaleListingSource> log)
     {
-        _http = http;
+        _clients = clients;
         _log = log;
     }
 
@@ -27,7 +27,7 @@ public class BaleListingSource : IListingSource
 
         try
         {
-            var client = _http.CreateClient("scrape");
+            var client = _clients.For(s);
             var body = await client.GetStringAsync($"{BaseUrl}/bot{s.BaleBotToken}/getUpdates", ct);
             using var doc = JsonDocument.Parse(body);
             if (!doc.RootElement.TryGetProperty("result", out var result) || result.ValueKind != JsonValueKind.Array)