seccomp: move macros to header

Move the BPF generation macros to the header file. This needs further
cleanup:

* some of the macros require the port pid, others do not

* some of the macros refer to functions

* some of the raw BPF statements should be wrapped in a function or
  macro