Broaden WAF tag coverage beyond Cloudflare/Imperva/Sucuri

[liquidsec]

Currently only 3 of 125 providers carry the waf tag:

• Cloudflare
• Imperva
• Sucuri

Several other providers operate major WAF products but are tagged differently (e.g. cloud) or have no tags at all:

• Akamai (Kona Site Defender) -- tagged cloud
• Amazon (AWS WAF / CloudFront WAF rules) -- tagged cloud
• Microsoft (Azure Application Gateway WAF) -- tagged cloud
• F5 (BIG-IP ASM) -- no tags

Consumers like BBOT's webbrute module use the waf tag to skip brute-forcing against WAF-protected hosts (avoid_wafs option). The narrow tag coverage means most WAF-protected hosts are not detected.

Adding the waf tag to providers that operate WAF products would improve downstream consumer accuracy.