feat: django-axes prefers forwarded ip address

Prioritize `HTTP_X_FORWARDED_FOR` for django-axes similar
to audit logs with the get_client_ip.

https://django-axes.readthedocs.io/en/latest/4_configuration.html#configuring-reverse-proxies

Refs: PT-2026

Author: charn

palvelutarjotin/settings.py

@@ -447,6 +447,7 @@ def sentry_traces_sampler(sampling_context: SamplingContext) -> float:
 
 AXES_FAILURE_LIMIT = 5
 AXES_COOLOFF_TIME = 1  # hour after locked out, user will be able to attempt login
+AXES_IPWARE_META_PRECEDENCE_ORDER = ["HTTP_X_FORWARDED_FOR", "REMOTE_ADDR"]
 
 LOGGING = {
     "version": 1,