pf: Assert that pfil_link() calls succeed

These should only fail if we use them incorrectly, so assert that they
succeed.

MFC after: 1 week
Sponsored by: Rubicon Communications, LLC (“Netgate”’)

(cherry picked from commit c4e0f7aa1ae7729df8c3e525e511b84f8052375c)