Let brconfig tell whether the bridge is using the ipfilter hook, or not.
compile-time by BRIDGE_IPF, and at runtime by brconfig with the {ipf,-ipf} option on a per-bridge basis. As a side-effect, add PFIL_HOOKS processing to if_bridge.