pfctl_get_status_h() does not set errno, so don't log it.

PR:		291936
Reviewed by:	kp

Some refresh functions had two layers of 'do we need to refresh now?'
checks, leading to inconsistent refreshes.
Consolidate them.

PR:		291725
Sponsored by:	Rubicon Communications, LLC ("Netgate")

Extend the test case to verify this works as expected.

Sponsored by:	Rubicon Communications, LLC ("Netgate")

pfInterfacesIfRefsState was described as 'Null', which upset bsnmpwalk's attempt
to resolve OIDs to symbolic names:

> bsnmpwalk: Error adding leaf pfInterfacesIfRefsState to list

This was done back in d6d3f01e0a339, because we don't return this value any
more. Return it to 'Unsigned32', which fixes things, even if we still don't
actually return this value.

While here update the ORGANIZATION to reflect current ownership.

Reviewed by:	philip
MFC after:	2 weeks
Event:		Tokyo Hackathon 202503
Differential Revision:	https://reviews.freebsd.org/D49413

Sponsored by:	Rubicon Communications, LLC ("Netgate")

We now support multiple lables on a rule, so 'rule' is an array of strings, not
just one string. Adjust the check for 'is there a label?'.

CID:		1471808
Sponsored by:	Rubicon Communications, LLC ("Netgate")

On most platforms time_t is 64 bits wide, but we assign it to 32 bits
variables. Unfortunately these are SNMP fields that are defined to be 32 bits
wide, so we cannot change this. We are similarly unable to prevent the passage
of time, meaning that time_t must remain 64 bits wide as well.

Explicitly cast to tell Coverity that we're aware of these limitations and do
not wish to be reminded of them.

CID:		1553869
CID:		1557025
CID:		1592232
CID:		1592234
Sponsored by:	Rubicon Communications, LLC ("Netgate")

Event:		Kitchener-Waterloo Hackathon 202406

Add a handle variant of pfctl_get_rule(). This converts us from using
the nvlist variant to the netlink variant, and also moves us closer to a
world where all libpfctl functions take the handle.

While here have pfctl use the new function.

Sponsored by:	Rubicon Communications, LLC ("Netgate")

pfctl_get_rules_info() opened a netlink socket, but failed to close it again.
Fix this by factoring out the netlink-based function into a _h variant that
takes struct pfctl_handle, and implement pfctl_get_rules_info() based on that,
remembering to close the fd.

While here migrate all in-tree consumers to the _h variant.

MFC after:	3 days
Sponsored by:	Rubicon Communications, LLC ("Netgate")