daemon: Release identities in failure condition
daemon: Release identities in failure condition

If some of the identities cannot be located in the kvstore, then none of
the identities or ipcache entries would be deleted when removing a
policy. Fix this up to instead attempt to locate as many of the entries
as possible, then free as many as can be located.

Fixes: 4692732 ("daemon: Allocate identities for CIDRs")

Signed-off-by: Joe Stringer <16a9a54ddf4259952e3c118c763138e83693d7fd@covalent.io>

tklauser/cilium,michi-covalent/cilium,scanf/cilium,cilium/cilium,scanf/cilium,tklauser/cilium,michi-covalent/cilium,eloycoto/cilium,scanf/cilium,tklauser/cilium,tgraf/cilium,scanf/cilium,scanf/cilium,tgraf/cilium,eloycoto/cilium,scanf/cilium,tgraf/cilium,eloycoto/cilium,tklauser/cilium,michi-covalent/cilium,eloycoto/cilium,cilium/cilium,cilium-team/cilium,eloycoto/cilium,cilium-team/cilium,cilium/cilium,tgraf/cilium,eloycoto/cilium,cilium/cilium,tklauser/cilium,cilium/cilium,tgraf/cilium,michi-covalent/cilium,michi-covalent/cilium,eloycoto/cilium,scanf/cilium,tgraf/cilium