Batch ipset elements in nftables set_restore to avoid O(n^2) insertion cost on RHEL/AlmaLinux 8. Adds the patch as Patch1000, bumps the release to .alma.1, and adds a changelog entry.