refactor(downloads): extract ImportFileController with clean URL route
Replaces legacy ?act=import include with ImportFileController at
/downloads/import/{id}. Improves URL validation to allow https and
adds SSRF protection by blocking private/reserved IP ranges.
/downloads/import/{id}. Improves URL validation to allow https and
adds SSRF protection by blocking private/reserved IP ranges.