Upstream update to v0.33.

• Documentation moved to https://foomuuri.foobar.fi/latest/
• Unify command line syntax:
• foomuuri list is renamed to foomuuri ruleset list.
• foomuuri list macro is renamed to foomuuri macro list.
• foomuuri list counter is renamed to foomuuri counter list.
• Add port knocking and automatic IP address banning (fail2ban) support. These happen fully on packet path, native on nftables level. No external programs are needed.
• Add support for catch all interface * in zone section, for example public *. It will match all unassigned interfaces. Interfaces assigned to a zone in configuration file or by NetworkManager / D-Bus will use assigned zone.
• Add iplist status [IPLIST]... command to list number of entries in iplist.
• Add iplist_add, iplist_update and iplist_delete matchers to add/update/delete IP address to iplist on packet path.
• Add dynamic=yes option to iplist section line. This option enables dynamic flag, needed for packet path updates.
• Add element_timeout=time option to iplist section line. This option sets default expire timeout for iplist elements.
• Add start=no option to iplist section line. Foomuuri will not add IP addresses to such lists at startup. Entries will be added later by foomuuri-iplist.timer service. This can be used with "unsafe" external iplist to make sure Foomuuri start will not fail or block your access for first minutes after reboot.
• Change iplist section option -merge to merge=no.
• Add flowtable list-of-interfaces to foomuuri section. It enables Netfilter flowtable infrastructure. It improves network forward performance for high speed interfaces.
• Add matter macro to default services.
• Fix: Interface lo is special. Matcher oifname lo does not work in prerouting (DNAT) chain. Output it as fib daddr type local instead.