T5416: fix ipsec matcher

[nicolas-fort]

Change Summary

Fix ipsec matcher,

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe):

Related Task(s)

• https://vyos.dev/T5416

Component(s) name

firewall

Proposed changes

Quick fix for ipsec matcher when ipsec is missing.

How to test

vyos@vyos# run show config comm | grep FOO
set firewall name FOO rule 10 action 'drop'
set firewall name FOO rule 10 ipsec match-none
set firewall name FOO rule 10 protocol 'gre'
set firewall name FOO rule 20 action 'drop'
set firewall name FOO rule 20 ipsec match-ipsec
set firewall name FOO rule 20 protocol 'gre'
[edit]
vyos@vyos# 
vyos@vyos# sudo nft list chain ip vyos_filter NAME_FOO
table ip vyos_filter {
        chain NAME_FOO {
                meta l4proto gre meta ipsec missing counter packets 0 bytes 0 drop comment "FOO-10"
                meta l4proto gre meta ipsec exists counter packets 0 bytes 0 drop comment "FOO-20"
                counter packets 0 bytes 0 drop comment "FOO default-action drop"
        }
}
[edit]
vyos@vyos# cat /run/nftables.conf | grep ipsec
        meta l4proto  gre meta ipsec == 0 counter drop comment "FOO-10"
        meta l4proto  gre meta ipsec == 1 counter drop comment "FOO-20"
[edit]
vyos@vyos# 

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• I have run the components SMOKETESTS if applicable
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

[sever-sever]

Do the options do the same (with and without secpath)?

meta l4proto gre meta ipsec missing 

and

meta l4proto gre meta secpath missing