netfilter: add explicit Kconfig for NETFILTER_XT_NAT