Add support for an Allowlist for the `reverse proxy`

[handstandsam]

By default the reverse proxy is enabled and open. It would be good to add an explicit allow-list for this for security reasons.

This reverse proxy enables the android device to make AI calls, even when "offline".