Be more forceful about replacing iptables/ip6tables (#73714)

Hoping this is the right change to resolve an issue I'm having with
`iptables-wrappers` and `linkerd2`; posting to get a pre-submit URL for
testing.

---------

Co-authored-by: Chris Herborth <chrish@taffer.ca>

Author: Taffer

iptables-wrappers.yaml

@@ -1,13 +1,16 @@
 package:
   name: iptables-wrappers
   version: 2
-  epoch: 3 # CVE-2025-61725
+  epoch: 4
   description: Wrapper scripts for using iptables in containers
   copyright:
     - license: Apache-2.0
   dependencies:
     runtime:
       - xtables
+    replaces:
+      - iptables
+      - ip6tables
 
 vars:
   wrapped-commands: |

iptables.yaml

@@ -1,7 +1,7 @@
 package:
   name: iptables
   version: 1.8.11
-  epoch: 28
+  epoch: 29
   description: Linux kernel firewall, NAT and packet mangling tools
   copyright:
     - license: GPL-2.0-or-later
@@ -200,6 +200,8 @@ subpackages:
       runtime:
         - merged-sbin
         - wolfi-baselayout
+      replaces:
+        - xtables
 
   # iptables-apply is a bash script, and therefore depends on bash
   # only a subset of iptables users use this script, so we keep