nf_conntrack went mainline!
Ok, finally. After David Miller has returned from his holidays, nf_conntrack has 'magically' ended up in the mainline tree. Stateful IPv6 packet filtering in vanilla 2.6.15 is therefore reality.
Thanks to Yasuyuki, DaveM, Acme and everybody else who has made this happen.