luci-app-firewall: add reflection_zone field to forwards