Apply split-horizon logic for all egress traffic

Traffic originated from provider network e.g. flat/vlan/vxlan/gre cannot be routed to provider port weather it's tunnel/port to ext-net/patch port to provider bridge.

The following pipeline fixes needs to be applied:

• Any egress traffic needs to pass through the egress table (T220)
• Add egress table rules for each non-VM port to drop traffic where the SH-bit (LSB in metadata) is set