firewall: get lockout interface from get_primary_interface_from_list()
firewall: get lockout interface from get_primary_interface_from_list()

It's better logic than before as it uses all optX.  Found while grepping for opt1.

opnsense/core,opnsense/core,opnsense/core,opnsense/core,opnsense/core,opnsense/core