docs: Update cron schedules to match actual configuration

- Correct permanent ban script cron schedule: 2:00 AM daily (not every 6 hours)
- Correct geoip-shell update cron schedule: 4:08 AM daily (not 4:18 AM)
- Add geoip-shell persistence cron job that runs on reboot

docs/geoip-blocking.md

@@ -28,11 +28,16 @@ sudo make install
 
 ### Update Mechanism
 - **Cron Service:** ✅ Enabled
-- **Update Schedule:** Daily at 4:18 AM (`18 4 * * *`)
+- **Update Schedule:** Daily at 4:08 AM (`8 4 * * *`)
 - **Last Update:** September 17, 2025 at 00:57:41
 - **Persistence:** ✅ Enabled (survives reboots)
 - **Backup:** ✅ Automatic IP lists backup enabled
 
+### Persistence Cron Job
+- **Schedule:** On reboot (`@reboot`)
+- **Command:** `/usr/bin/geoip-shell-run.sh restore -a`
+- **Purpose:** Restores geoip-shell firewall rules after system reboot
+
 ## Inbound Geoblocking Configuration
 
 ### Blocking Mode