feat: refactor interception modules into pausable group

- Add GroupModule to wrap interception, dnsmonitor, and compat modules
- Simplify pause/resume operations by grouping related modules
- Update worker info collection to handle nested module groups
- Remove deprecated flags and improve module lifecycle management
- Add proper atomic state tracking for nfqueue interception

https://github.com/safing/portmaster/issues/2050

service/firewall/interception/interception_linux.go

@@ -34,11 +34,6 @@ func startInterception(packets chan packet.Packet) error {
 
 // stop starts the interception.
 func stopInterception() error {
-	// TODO: stop ebpf workers gracefully
-	// E.g.:
-	// 		module.mgr.Cancel()
-	// 		<-m.Done()
-
 	return StopNfqueueInterception()
 }