certain requests shall ignore geoip and go to download.o.o instead

[andrii-suse]

1. all .asc files: handling them from geoip address may be less secure in extreme cases.
2. All files without version / hash in name (e.g. media.1/media) : it is tricky to track them on mirrors, so potentially the request may be redirected to outdated mirror.

Here is fragment of current output when using geoip, all these requests should go to download.o.o:

Building repository 'Update repository of openSUSE Backports' cache [....done]
Checking whether to refresh metadata for Non-OSS Repository
Retrieving repository 'Non-OSS Repository' metadata [.Retrieving: http://mirrorcache-us.opensuse.org/distribution/leap/15.4/repo/non-oss/media.1/media [..done (171 B/s)]
Retrieving: http://download.opensuse.org/distribution/leap/15.4/repo/non-oss/repodata/repomd.xml.asc [..done (481 B/s)]
Retrieving: http://download.opensuse.org/distribution/leap/15.4/repo/non-oss/repodata/repomd.xml.key [..done (988 B/s)]
Retrieving: http://download.opensuse.org/distribution/leap/15.4/repo/non-oss/repodata/repomd.xml [....done (900 B/s)]
Retrieving: http://mirrorcache-us.opensuse.org/distribution/leap/15.4/repo/non-oss/gpg-pubkey-307e3d54-5aaa90a5.asc 

[bzeller]

We actually have a filter for files that are not fetched via geoip: "^.*\\/repomd.xml(.asc|.key)?$|^\\/geoip$", I guess we can add the media files there too. But I don't see how we should detect the "all files without checksum case" we can only add specific ones there.