move allowlist out of config files

[alexandermichels]

The current solution requires that we manually update the config files and restart the Core server to update the allowlist. What is the best way to allow for: (1) instant updates without restarts and (2) allow us to programmatically update the allowlist?

My initial thought would be dropping the config field and creating new tables in the database for allowlist/denylist, but open to better solutions.