puppet nftables

Remove a blank separating the doc string and the code

Otherwise the generator of the docs does not do the job :/

Correct layout of ignore chain example

New parameter out_all, default false

In order to allow all outbound traffic a parameter is
added to enable a simple `allow` entry on the out chain.

Default is false so backwards compatible.

If true all the other out_bound rules (ntp, ...) will be disabled...