UPnP cleanup and fixes for #432

Code to fix the issues outlined in #432. The surgery was fairly invasive: I thought it best to leave the commits un-squashed so as to leave the transformations of the code as granular and obvious as possible. I'm happy to squash away if that's desired.

Notes:

* The generalization from 1 thing to n things made returning an error awkward. For example, if discovery fails on one device, that shouldn't affect the discovery of any other device. Mapping errors back to devices is awkward, requiring either parallel arrays or an additional field in the IGD struct, and much more complicated error-handling logic in the consumer. Since no error-handling logic beyond writing to log files was done by the upstream consumers, I elected to simply log errors to the debug log facilities instead of returning them to the consumer.
* I tested the changes with one of my local routers, Wireshark, and a miniupnpd instance in a VM. I didn't see a good way to automate testing of the discovery or port mapping mechanisms; the only readily testable portion of the API seems to be the search and port mapping request strings. These operations seem don't seem susceptible to regressions, but I can write tests if desired.
* Searching for multiple devices requires a bit of concurrency, which is frequently difficult to grok. I attempted to write the cleanest code possible and documented as well as I could, but I'd be particularly interested in feedback about how penetrable the solution is.
There's a logic errors here; I intended for `externalPort` to be set exactly once, per the previous iteration of the code. I'm addressing this issue by refactoring the code to separate out the generation of the random external port from the port mapping.

With this arrangement, I believe it doesn't matter which IP address is advertised to the announce server. As long as we configure every gateway device, packets sent to our unique external port on _any_ gateway device should be forwarded to our local port.