Docs: matching everything but a few; release builds of a candidate

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -121,6 +121,9 @@ All notable changes to Housecarl are documented here. The format follows
   marked with a red bar. An empty list is never saved as negated (it
   matched everything anyway, but would have negated what was added to
   it later).
+- docs/rules.md: "Matching everything but a few", on leaving some
+  addresses out with a zone and "any but", and what to do when the range
+  isn't a zone.
 - The rule dialog shows only the zone fields its chain can use: no
   "Going out on" for input and early, no "Coming in on" for output
   (they could only be refused). A zone left in a field the chain hides