feat(cilium): loadbalancer mode default to dsr and allow configurability

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/templates/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml.j2

@@ -27,7 +27,11 @@ spec:
       service:
         annotations:
           lbipam.cilium.io/ips: "#{ bootstrap_cloudflare.ingress_vip }#"
+        #% if bootstrap_loadbalancer_mode in ['dsr']  %#
         externalTrafficPolicy: Cluster
+        #% else %#
+        externalTrafficPolicy: Local
+        #% endif %#
       ingressClassResource:
         name: internal
         default: true