pf: improve SCTP state validation

Only create new states for INIT chunks, or when we're creating a
secondary state for a multihomed association.

Store and verify verification tag.

MFC after: 3 weeks
Sponsored by: Orange Business Services

(cherry picked from commit 51a78dd2764beabfd19a58b8a8b04387a547f02e)