mod_firewall: Initialize compiled chunk just once for all handlers This should fix a case where some stateful dependencies (such as throttles) produce separate instances for every call to new_handler(), leading to surprising behaviour (e.g. rules executed via JUMP CHAIN vs ::deliver would have separate rate limits). This also adds better error handling in case the compiled code fails to run for some reason.

---
summary: Log a message once per minute
...

This module sends `-- MARK --` to the log once per minute. This may be
useful to give a sense of how busy the server is or see that logging and
timers are still working.