Why do my firewall rules not reduce my Google Ads spend?

Because the money left your account before the request ever reached your server. Nothing is misconfigured. You added rules that correctly block page loads for visitors you had already paid for, so the invoice looks the same. To affect spend, the block has to happen at auction time inside Google Ads, not at your edge.