You should put your firewall in your “files” path, not root-ar71xx. That is how “files” work.
imagebuilder/3.1/openwrt-imagebuilder-ar71xx-generic_3.1/files/etc/config/firewall