smoketest: T9474: firewall: cover untested CLI options

Around fifty firewall CLI options were never set by the smoketest, or only
for one address family although they render differently per family. The
bridge output hook had no coverage at all.

New checks are folded into existing commits where possible:
- icmp/icmpv6 type, code and type-name, fragment, hop-limit, ttl lt,
  time windows, source port, limit burst, set tcp-mss, tcp flags
- destination address/domain/dynamic groups, geoip asn, interface groups,
  group includes, ipv6-network-group, disabled rules
- ipv6 recent, synproxy, set dscp, connection-mark, helper, packet-type
- bridge output hook, default actions/logging, default-jump-target
- state-policy log and log-level, source-validation disable,
  apply-to-bridged-traffic ipv6, intra-zone action/firewall, zone
  default-log and default-firewall ipv6-name

Rules carry their own matches so none shadows the following ones.

0 files changed, 0 insertions, 0 deletions