Function deriveClientIp

Derive effective client IP from socket and trusted proxy chain settings.

• trustProxyHops=0: always uses socket/request IP fallback.
• trustProxyHops>0: uses right-to-left X-Forwarded-For selection.