net: cls_bpf: add support for marking filters as hardware-only