pf: drop packets if they fail nat64 translation

If we can't map ICMPv4 onto ICMPv6 or vice versa drop the packet rather than
continuing with an untranslated packet.

Sponsored by: Rubicon Communications, LLC ("Netgate")