Put custom scrub rules first

The custom scrub rules on the normalization settings page effectively
cannot be reached since the standard interface scrub rules are listed
first.

This patch swaps that order around so that custom scrub rules get
evaluated first.

(config/interfaces) some older configurations use <enabled/> in stead of our current standard <enabled>1</enabled>. to avoid new issues, its better to convert when only set.

"index.php*" match in dashboard privileges overlays a bit
with "index.php?logout" so that we'll have to hardcode an
exception for now.  Other approaches to be taken here mid-
term are 'visibility="always"' in Menu.xml or restructure
the logout link under /ui/logout or /logout.php.

PR: https://forum.opnsense.org/index.php?topic=3431.0

Add translatable template

Fix IPv6 Outbound NAT

Rules using "Interface Address" as the NAT target IP did not select the
IPv6 address when generating the rule

Firefox and Safari are unaffected.  No harm done in deleting a
pointer to a non-existing source map.  Oh my.

Inspired by: @adschellevis

maybe, one day, we should refactor some of the JS code... but for now this will do the trick

(reporting/settings) option to flush all local netflow data. closes https://github.com/opnsense/core/issues/983

(rrd) add configd "systemhealth flush" command, add flush single report. closes https://github.com/opnsense/core/issues/984

Bravely assisted by: @ShaRose

(interface groups) trigger missing to notify changed interface administration, closes https://github.com/opnsense/core/issues/1064

Language correction: more generic expression