Improve screenshot quality and add access restrictions screenshot

src/pages/manage/reverse-proxy/authentication.mdx

@@ -3,7 +3,7 @@ import {Note, Warning} from "@/components/mdx"
 export const description =
     'Configure SSO, password, PIN, and header authentication methods, plus IP and country access restrictions, for NetBird Reverse Proxy services.'
 
-# Reverse Proxy Authentication
+# Reverse Proxy Authentication and Access Restrictions
 
 NetBird Reverse Proxy supports multiple authentication methods and connection-level access restrictions to control who can access your exposed services. You can enable one or more methods on each service, or leave a service completely public. Authentication and access restrictions are configured per service in the **Authentication** tab when creating or editing a service.
 
@@ -135,6 +135,10 @@ Access restrictions control which connections are allowed to reach your service
 
 Access restrictions are evaluated **before** authentication. If a connection is blocked by an IP or country rule, it is rejected immediately without any authentication check.
 
+<p>
+    <img src="/docs-static/img/manage/reverse-proxy/authentication/access-restrictions-geo-ip.png" alt="Authentication tab showing all available authentication methods" className="imagewrapper"/>
+</p>
+
 ### IP CIDR restrictions
 
 You can define IP allowlists and blocklists using CIDR notation: