Allow custom DPF whitelist/blacklist upload

Managing filter exceptions one domain at a time in the UI is painful for a fleet. Let me upload a CSV of allow/deny domains, or expose an API endpoint I can sync from our own list.