pfsync: count failed state insertions

If we fail to import a state, for whatever reason, count this as a bad action.
We should not drop states without at least incrementing an error count.

Sponsored by: Rubicon Communications, LLC ("Netgate")