pf: fix incorrect list use in pflow_jail_remove()

We remove items from V_pflowif_list while iterating it (via pflow_destroy()), so
we must use the _SAFE macro.

Sponsored by: Rubicon Communications, LLC ("Netgate")