Remove minimum payload assertions for bare protocol checks

* src/pf/expand.lua: For bare protocol checks like "ip" (not
  e.g. "ip[1]"), remove length assertion.  More closely follows pcap
  semantics and seems to remove a regression when benchmarking the "tcp"
  filter against a ping flood.