detect: don't eval SIG_TYPE_APPLAYER against ffr packets

SIG_TYPE_APPLAYER are mostly the same as SIG_TYPE_PKT, except that a
rule match will apply a drop/pass to the flow.

Example of a SIG_TYPE_APPLAYER rule.

```
alert http any any -> any any (sid: 1;)
```

src/detect.c

@@ -782,7 +782,7 @@ static inline void DetectRulePacketRules(
         }
 
         /* skip pkt sigs for flow end packets */
-        if ((p->flags & PKT_PSEUDO_STREAM_END) != 0 && s->type == SIG_TYPE_PKT)
+        if ((p->flags & PKT_PSEUDO_STREAM_END) != 0 && (s->type == SIG_TYPE_PKT || s->type == SIG_TYPE_APPLAYER))
             goto next;
 
         /* don't run mask check for stateful rules.