port Thomas Graf's CT incremental change, with zone support

From Thomas Graf

	Work-in-Progress

	Attach conntrack template to packet if a non standard zone setting has
	been provided. Conntrack template is stored in action.

With a few more small changes to stitch it to the previous patch.
datapath-compat: add nf_conntrack_tmpl_insert API