Set firewall state to CREATED when dealing with DVR

When DVR is enabled as a default option for creating routers, firewall
resources will need to have a new initial state, so that reconciliation
can be done once all L3 agents have processed the firewall rules.

The new state has been introduced to preserve API bw compatibility
with centralized routers.

Partial-bug: #1360351
Supports-blueprint: neutron-dvr-fwaas

Change-Id: I53122570dd3a2311eedb24ccd925bcdc9ad4f70c
Use lockutils module for tox functional env

A previous change (I4d6076e5f7586a11ea5381f18774d4bab57b0081) added
lockutils to only the dsvm-functional tox env.  It also needs to be
added to the functional tox env.

Change-Id: I3a799692b2162b738a2b080e08602b403c171e4f
Closes-Bug: 1332380
Merge "Set firewall state to CREATED when dealing with DVR"
Merge "Use lockutils module for tox functional env"