policy: Don't remove L4+ policies for host/world
policy: Don't remove L4+ policies for host/world

The previous commit ensured that for host/world, if the relevant daemon
modes are enabled (AllowsLocalhost=always / HostAllowsWorld), then the
policy will generate L7 wildcard rules when any rules might select the
host or world. However, traffic will still not be redirected to the host
or world because of the code that is removed in this commit.

This patch removes the removal of L4 ports for host / world in these
modes, which reinstates the redirects when L7 policy is applied. This
enables the proxies to gain visibility over the host or world again when
in these modes.

This can be considered a revert of commit b666ceeb286f ("policy: Overwrite
eventual L4 localhost policies when AllowLocalhost=true"), which also
ensured that L4 policies wouldn't restrict accessibility from the host,
however it broke proxy visibility into such traffic, as reported in
GitHub issue #4401.

Fixes: #4401

Signed-off-by: Joe Stringer <16a9a54ddf4259952e3c118c763138e83693d7fd@covalent.io>

eloycoto/cilium,michi-covalent/cilium,scanf/cilium,cilium/cilium,michi-covalent/cilium,michi-covalent/cilium,scanf/cilium,scanf/cilium,tklauser/cilium,cilium-team/cilium,cilium-team/cilium,cilium/cilium,eloycoto/cilium,cilium/cilium,scanf/cilium,eloycoto/cilium,tgraf/cilium,tgraf/cilium,tgraf/cilium,scanf/cilium,tgraf/cilium,eloycoto/cilium,cilium/cilium,tklauser/cilium,michi-covalent/cilium,eloycoto/cilium,eloycoto/cilium,scanf/cilium,tgraf/cilium,cilium/cilium,tklauser/cilium,scanf/cilium,michi-covalent/cilium,eloycoto/cilium,tgraf/cilium,tklauser/cilium,tklauser/cilium