feat(firewall): Move-up/down buttons for rule priority reordering

Adds ↑↓ icon buttons in the firewall rules table. Clicking swaps
the rule's priority value with its sorted neighbor via two sequential
PUTs. First rule's ↑ and last rule's ↓ are disabled. Viewer role
cannot reorder.

v1.1.102

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

management-ui/src/i18n/locales/de/common.json

@@ -109,6 +109,8 @@
       "cidr": "CIDR",
       "actions": { "accept": "ACCEPT", "drop": "DROP", "reject": "REJECT" },
       "kinds": { "any": "Beliebig", "object": "Objekt", "group": "Gruppe", "cidr": "CIDR" },
+      "moveUp": "Nach oben (höhere Priorität)",
+      "moveDown": "Nach unten (niedrigere Priorität)",
       "emptyTitle": "Noch keine eigenen Firewall-Regeln.",
       "emptyDesc": "Die System-Regeln oben halten SSH (rate-limited), HTTPS :443 und Mgmt-UI :3443 immer offen (Anti-Lockout). Eigene Regeln für app-spezifische Inbound-Ports oder zonenübergreifende Forwards anlegen."
     },

management-ui/src/i18n/locales/en/common.json

@@ -109,6 +109,8 @@
       "cidr": "CIDR",
       "actions": { "accept": "ACCEPT", "drop": "DROP", "reject": "REJECT" },
       "kinds": { "any": "Any", "object": "Object", "group": "Group", "cidr": "CIDR" },
+      "moveUp": "Move up (higher priority)",
+      "moveDown": "Move down (lower priority)",
       "emptyTitle": "No custom firewall rules yet.",
       "emptyDesc": "The system rules above keep SSH (rate-limited), HTTPS :443 and the mgmt UI :3443 open (anti-lockout). Add custom rules for app-specific inbound ports or cross-zone forwards."
     },