[NETFILTER]: nf_{conntrack,nat}_proto_tcp: constify and annotate TCP modules