netfilter: nft_compat: call {target, match}->destroy() to cleanup entry