add nftables service

Note: Currently, it depends on nftables-systemd-git (AUR)