The Blocked badge used $inc->blocked_at, which is only set on the single incident
that triggered the block. Other incidents from the same (already-blocked) IP
showed no badge, making it look like the IP had slipped through when it was in
fact blocked. Compute the set of blocked IPs on the page (one query, no N+1) and
badge every incident whose source_ip is currently blocked at the edge.