- Add secmarks (id-keyed) and vars (key-keyed) resources: migration 0009, model,
store CRUD, REST handlers.
- Compiler rendering for the global-compiled tail: blrules, conntrack, secmarks
render on enforcing devices; vars render on every device. This closes the
rendering gap left by batch 1 (blrules/conntrack were stored but not rendered).