[#64582784] Fix SNAT bug causing issues with diff/idempotency

... and enable all tests that previously failed due to this bug.

Refactored the NatService tests to be more like FirewallService tests, clarifying their purpose somewhat.