Enhance ACL parser to support inactive addresses in Juniper firewall filters

The `trigger.acl.TIP` object needs to be enhanced to support `inactive: {address}` form of IP addresses inside of ACL terms.

The objects need to be skipped for the purpose of access-checking as if it's not even there. We should probably add an `iactive` boolean attribute to the object similar to the attribute of the same name on `trigger.acl.Term` objects. This value should default to `False`.

`TIP` objects with `inactive=True` sould stringify back to `inactive: {address}`.