Security: restrict RTL, Mempool ports to LAN-only; remove global firewall rules

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/1110322d-bc41-4d5d-9a4c-e5f7a5d2ef57

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>

modules/core/sovran-hub.nix

@@ -293,6 +293,5 @@ in
       };
     };
 
-    networking.firewall.allowedTCPPorts = [ 3051 8937 60847 ];
   };
 }