Consider documenting blocking /metrics in reverse proxy configs

[strugee]

Followup from https://github.com/jellyfin/jellyfin-docs/pull/516#discussion_r600925961, which I happened to open and then notice never got resolved. I still am not convinced this is a real problem, but I figured I'd raise this issue in case everyone disagrees with me :-)