netfilter: nft_reject: introduce icmp code abstraction for inet and bridge