CCM-Managed firewalls for Linodes

Recently CCM-managed firewall support was added although this only applies for NodeBalancers. We'd like to have this feature also added for managing firewalls for Nodes themselves, likely based on Node annotations similar to the existing Service annotation support:

kind: Node
apiVersion: v1
metadata:
  annotations:
    node.alpha.kubernetes.io/linode-firewall-acl: |
      {
        "allowList": {
          "ipv4": ["8.8.8.8/32"],
          "ipv6": ["dead:beef::/64"]
        }
      }

This would be used by CAPL to request Firewalls be created and configured for workload clusters (see https://github.com/linode/cluster-api-provider-linode/pull/169 which reuses some of the CCM's firewall logic).

linode / linode-cloud-controller-manager

CCM-Managed firewalls for Linodes #185