packages: ipv6/tayga: move static mappings to 'firewall' config