fix: ignore .woff2 and modern static-asset extensions

The EXTENSIONS_TO_IGNORE list predates woff2 and other modern asset
formats. Matching is case-insensitive suffix matching, so ".woff" does
not cover ".woff2" — bot requests for woff2 fonts were forwarded to the
Prerender service instead of passing through to the servlet chain.

Aligns with the integration contract (CONTRACT.md §3): adds .woff2,
.otf, .eot, .webp, .avif, .webmanifest.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: Marcin

src/main/java/io/prerender/PrerenderConfig.java

@@ -18,7 +18,8 @@ class PrerenderConfig {
         ".pdf", ".doc", ".txt", ".ico", ".rss", ".zip", ".mp3", ".rar",
         ".exe", ".wmv", ".avi", ".ppt", ".mpg", ".mpeg", ".tif", ".wav",
         ".mov", ".psd", ".ai", ".xls", ".mp4", ".m4a", ".swf", ".dat",
-        ".dmg", ".iso", ".flv", ".m4v", ".torrent", ".ttf", ".woff", ".svg"
+        ".dmg", ".iso", ".flv", ".m4v", ".torrent", ".ttf", ".woff", ".svg",
+        ".woff2", ".otf", ".eot", ".webp", ".avif", ".webmanifest"
     );
 
     private static final String DEFAULT_SERVICE_URL = "https://service.prerender.io/";

src/test/java/io/prerender/PrerenderFilterTest.java

@@ -96,6 +96,17 @@ void botRequest_staticAsset_passesThrough() throws Exception {
         verify(response, never()).setStatus(anyInt());
     }
 
+    @Test
+    void botRequest_fontAsset_passesThrough() throws Exception {
+        when(request.getMethod()).thenReturn("GET");
+        when(request.getRequestURI()).thenReturn("/fonts/inter.woff2");
+
+        filter.doFilter(request, response, chain);
+
+        verify(chain).doFilter(request, response);
+        verify(response, never()).setStatus(anyInt());
+    }
+
     @Test
     void escapedFragment_triggersPrerender() throws Exception {
         wireMock.stubFor(get(anyUrl())