Whitelist zammad attachment URLs

[chrisblech]

When downloading attachments (or the zammad-SPA fetches attachment previews), crowdsecurity/http-crawl-non_statics may trigger HTTP crawl non statics, since the Attachment-/Preview-URLs are not marked as images (ending in png,jpg etc) or PDF.