Guide: firewall configuration — stealth mode, block-all, and pf for SSH

[davidwhittington]

Companion to the SSH guide: documents the Application Firewall vs pf tradeoff, how to enable stealth mode, and how to configure pf for port-level control while keeping SSH accessible.