Function analyzeUserAgent

Classify a User-Agent string and return a UaClassification.

• Unknown / absent UAs are treated as potentially suspicious but not definitively a bot — let downstream scoring decide.
• Legitimate crawlers (isCrawler: true) have isBot: false so that the default rule engine does not block them.