Handle "any TCP" service preservation for TCP RST reject action

[markuslf]

Two locations in src/firewallfabrik/platforms/iptables/_policy_compiler.py: the C++ implementation preserves an "any TCP" service object when action_on_reject is TCP RST. The Python port currently does not replicate this behaviour.