Add a new test that tests that the DNS over TCP to the external (WORLD)
target works through the DNS proxy with a DNS-only policy.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>

Use the zero value of L4Protocol for NONE, which needed to make DNS
requirement protocol specific in a following commit.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>

Add L4Protocol ANY for "any applicable" protocol and use it for DNS
requirement.

Replace DNSRequired with DNSProtocol, which can be UDP, TCP, or ANY for
either of them.

Make Dig+tcp test validate only TCP.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>

Add command line option '--numeric' to print hubble flows without IP
translation. This helps in matching flow requirements to flows when
debugging failing flow validation, as the flow requirements are printed
(and executed) with IP addresses without translation.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>

Enable test flow validation in external workloads test by forwarding the
hubble port in external-workloads-install.sh.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>