_firewall_config.py: add ni-logos-xt service to work-out policy

[blair-ni]

Summary of Changes

Add ni-logos-xt service to work-out firewalld policy.

Justification

Our current policy only allows incoming LogosXT-based traffic, i.e. the traffic for features such as Shared Variables and Network Streams. This allows a remote host to access, e.g., an RT target-hosted Shared Variable. However, a remotely hosted Shared Variable is not accessible to a SNAC-enabled RT target. Allowing outgoing traffic on these ports fixes this.
See AB3122615 for more details.

Testing

• Ran make install and make installcheck against this change.
• Got the failing Shared Variable test to pass by manually adding the following entries to the firewall:
  • firewall-cmd --policy=work-out --add-port=2343/tcp
  • firewall-cmd --policy=work-out --add-port=59111/tcp
• Will run Shared Variable and Network Streams tests after merging.

Procedure

• This PR: changes user-visible behavior, fixes a bug, or impacts the project's security profile; and so it includes a CHANGELOG note.
• I certify that the contents of this pull request complies with the Developer Certificate of Origin.

[amstewart]

Spoke w/ blair somewhat offline.

Confirmed that the ports from his test cases match the service def file for logos here.

Blair has promised to run the RTATS against these changes once it is in.