nftables hotfix disappears

A manual packet filter change solves the immediate outage, but the next reload or reboot brings back the old policy because the permanent source of truth was never updated.