GHSA-5r34-2g38-6569: praisonaiagents web_crawl vulnerable to SSRF via redirect-following

The `web_crawl` tool in praisonaiagents only validates the initial URL's IP address against a blocklist of private/internal addresses, but then follows HTTP redirects without re-checking the redirect target's IP. An attacker can supply a public URL that redirects to an internal address (like cloud metadata services at 169.254.169.254 or localhost services), allowing the tool to fetch and leak internal data that should have been blocked by SSRF (server-side request forgery, where a tool fetches data from internal systems it shouldn't access) protection.