Decouple stream bypass from TLS encrypted bypass v9.1

[lukashino]

Following up on #12572

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6788

Describe changes:
v9.1:

• separated mixed changes into their respective commits

v9:

• changed mutex to atomicu8 for SSH encryption handling choice
• rebased

v8.1:

• specify the correct SV test

v8:

• rebased
• re: QA results: Expected behavior change, the QA needs to set ssh encryption handling to bypass to reproduce the same results. There is no middle-ground solution to have the defaults set exactly as before. See comments in Decouple stream bypass from TLS encrypted bypass v7 #12249

v7

• Style guide changes as suggested in the prev PR
• Encryption Handling has now three states, similar to TLS
• rebased

v6

• rebased

v5

• rebased
• added upgrade section
• fixed docs - Thanks Juliana
• SV tests should pass now

v4

• rebased
• changed SSH bypass defaults to hopefully be in sync with the previous settings

v3

• added SSH app-layer option encryption-handling allowing to choose whether to continue inspection on SSH once it turns encrypted
• added SV tests
• minor docs updates

SV_BRANCH=OISF/suricata-verify#2288

[github-actions]

NOTE: This PR may contain new authors.

[codecov]

Codecov Report

Attention: Patch coverage is 80.00000% with 8 lines in your changes missing coverage. Please review.

Project coverage is 80.72%. Comparing base (3831843) to head (50afbfd).

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #12573   +/-   ##
=======================================
  Coverage   80.72%   80.72%           
=======================================
  Files         929      929           
  Lines      259062   259094   +32     
=======================================
+ Hits       209119   209145   +26     
- Misses      49943    49949    +6     

Flag	Coverage Δ
fuzzcorpus	56.94% <42.50%> (-0.01%)	⬇️
livemode	19.39% <12.50%> (+<0.01%)	⬆️
pcap	44.15% <42.50%> (-0.04%)	⬇️
suricata-verify	63.41% <82.05%> (+0.02%)	⬆️
unittests	58.35% <42.50%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

[suricata-qa]

WARNING:

field	baseline	test	%
	SURI_TLPR1_stats_chk
.uptime	636	664	104.4%
.flow.end.state.local_bypassed	26015	17671	67.93%
	IPS_AFP_stats_chk
.flow.end.state.local_bypassed	1080	0	-
.flow_bypassed.local_pkts	25920	0	-
.flow_bypassed.local_bytes	2833920	0	-

Pipeline 24717