luci-base: properly detect flow offloading capabilities with nftables

When the system is running with nftables instead of iptables, the
proprietary XT_FLOWOFFLOAD module will not be present, query the nft
equivalent instead.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>