You should put your firewall in your “files” path, not root-ar71xx. That is how “files” work.

imagebuilder/3.1/openwrt-imagebuilder-ar71xx-generic_3.1/files/etc/config/firewall