Switch IP-scrutiny auto-blocks to hard reject (sign_up_block)

.env.example

@@ -117,9 +117,11 @@ IP_SCRUTINY_ABUSE_THRESHOLD=1
 IP_SCRUTINY_AUTO_IPBLOCK=true
 
 # Severity applied to auto-registered blocks: sign_up_requires_approval (soft,
-# recommended), sign_up_block (hard — no queue, cannot appeal via this bot),
-# or no_access (blocks all access, not just signups).
-IP_SCRUTINY_IPBLOCK_SEVERITY=sign_up_requires_approval
+# sends flagged range's future signups to the moderator queue), sign_up_block
+# (hard — flatly rejects future signups from the range at registration, no
+# queue, cannot appeal via this bot), or no_access (blocks all access, not
+# just signups).
+IP_SCRUTINY_IPBLOCK_SEVERITY=sign_up_block
 
 # check-mail.org disposable/high-risk email domain scrutiny (roadmap item B,
 # anti-abuse.md). Domain-only query (never the full email) against