dns forwarding: T5687: add missing constraints on ecs-add-for CLI node

Completion help suggests only IPv4 and IPv6 prefixes are supported, thus add a
proper constraint enforcing this.

(cherry picked from commit 049560725b93de49ec2d5a779e391e61d568ceb6)