ngc: add proper NAT hole punching

[Green-Sky]

In #2894 I discovered that NGC has no proper NAT traversal, it simply sends every packet also to the ipport we know of the other peer.

[nurupo]

Perhaps the already existing hole punching logic could be extracted into its own independent module that could then be used by the code that already uses it and now ngc too.