Moved two real OPNsense firewall/NAT rule exports (real internal IPs and ports) into private/ so they can stay on disk for reference without ever being committed. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>