// Package firewall holds the v2 (Fortigate-style) firewall data
// repos: address objects + groups, services + groups, policy rules,
// and NAT rules. Each entity has its own *.go file; the public
// surface is one Repo per entity, all sharing the same *pgxpool.Pool.
//
// Render-Logik (Joins zu nftables) wohnt in internal/firewall/.
package firewall