pf: fix anchor/ethernet anchor cleanup

Don't mess with reference counts, but use RB_FOREACH_SAFE() so we can safely
delete even wildcard anchors.

Sponsored by: Rubicon Communications, LLC ("Netgate")