[CORE-11600] Streamline BPF installation

[lucastigera]

Description

Context
To drive adoption of Calico’s BPF dataplane, we aim to simplify its setup by automating current manual steps. The goal is to support default BPF installations on clusters that iinitially use kube-proxy (e.g., via kubeadm) without requiring user configuration.

This PR extends the mount-bpffs init container to handle the initial BPF setup required for network communication when BPF is enabled and kube-proxy is disabled.

Changes

• Added a new field, BPFBootstrapMode, to the Installation custom resource (CR) to allow users to explicitly opt in to the automated BPF bootstrap process.
• In the Core Controller:
  • Validates that all BPF mode requirements are met.
  • Supplies the mount-bpffs init container with the Kubernetes service Cluster IPs, ports, and EndpointSlices.
  • Disables kube-proxy by patching its DaemonSet.
    • If an external operation (e.g., a kube-proxy upgrade) overrides this patch, the Core Controller will reconcile and re-apply the change.

The default behavior remains unchanged. If the user does not opt in via BPFBootstrapMode, the Operator will behave exactly as it does currently.

Error Handling
If the user opts in but any requirements are not met, the Operator will report a degraded status via TigeraStatus.

Tests
Implemented UTs in the Core Controller.
FVs and EEs are likely not necessary for this change.

Release Note

The Operator now automatically handles all required configuration when installing Calico in BPF mode on clusters using kube-proxy. A new field, `BPFBootstrapMode`, has been added to the `Installation CR` to control this behavior.

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.