v0.2.2

shorewall-nft 0.2.2

Gentoo support.

Gentoo has no native package in a repository yet, so this release adds two
supported ways to install, both reusing the shared installer so the on-disk
layout matches the other distros:

• From source. ./packaging/install.sh packaging/shorewallrc.gentoo. The
  installer now recognises a shorewall command owned by Portage (it checks
  qfile and equery) and refuses to overwrite it, so unmerge
  net-firewall/shorewall first.
• From an ebuild. packaging/gentoo/shorewall-nft-0.2.2.ebuild. Copy it
  into an overlay under net-firewall/shorewall-nft/, run ebuild <file> manifest, then emerge it.

Gentoo defaults to OpenRC, so an OpenRC init ships too. One script serves both
families, keyed on the service name; the ebuild installs it as shorewall and
shorewall6. Enable with rc-update add shorewall default. The systemd units
are installed as well and work on a systemd Gentoo.

See docs/distros.md for the Gentoo section. Both install paths are exercised in
CI in a real gentoo/stage3 container.

Full Changelog: v0.2.1...v0.2.2