agent: Limit routing of non-local cluster IPs to tunneling mode
agent: Limit routing of non-local cluster IPs to tunneling mode

Now that we support attaching a BPF prog to a native device while also
tunneling, limit the relaxed routing rule of local endpoints to only
when tunneling is disabled completely.

Signed-off-by: Thomas Graf <5f50a84c1fa3bcff146405017f36aec1a10a9e38@cilium.io>

michi-covalent/cilium,eloycoto/cilium,tklauser/cilium,eloycoto/cilium,cilium/cilium,cilium/cilium,gumpt/cilium,tgraf/cilium,cilium/cilium,gumpt/cilium,michi-covalent/cilium,gumpt/cilium,tklauser/cilium,eloycoto/cilium,tklauser/cilium,scanf/cilium,eloycoto/cilium,scanf/cilium,cilium/cilium,eloycoto/cilium,eloycoto/cilium,tgraf/cilium,tgraf/cilium,michi-covalent/cilium,tgraf/cilium,gumpt/cilium,tgraf/cilium,scanf/cilium,scanf/cilium,tgraf/cilium,gumpt/cilium,tklauser/cilium,cilium-team/cilium,michi-covalent/cilium,scanf/cilium,michi-covalent/cilium,scanf/cilium,cilium/cilium,tklauser/cilium,gumpt/cilium,scanf/cilium,gumpt/cilium,eloycoto/cilium,cilium-team/cilium