Amend firewall rules

This commit:

- fixes the GOVUK_PROD_IP variable:
-- adds a trailing closing bracket
-- adds the P1 production SNAT IP

- removes excess or unwanted firewall rules
- changes comments and variables to reference `backup` rather than `mirror`