child-sa: Add support for per-CPU SAs

The CPU ID is also set on inbound SAs as it can be used to configure RSS
or some eBPF program.

src/libcharon/plugins/ha/ha_dispatcher.c

@@ -820,6 +820,7 @@ static void process_child_add(private_ha_dispatcher_t *this,
 
 	child_sa_create_t data = {
 		.encap = ike_sa->has_condition(ike_sa, COND_NAT_ANY),
+		.cpu = CPU_ID_MAX,
 	};
 	child_sa = child_sa_create(ike_sa->get_my_host(ike_sa),
 							   ike_sa->get_other_host(ike_sa), config, &data);

src/libcharon/plugins/selinux/selinux_listener.c

@@ -125,6 +125,7 @@ METHOD(listener_t, ike_updown, bool,
 		child_sa_create_t child = {
 			.if_id_in_def = ike_sa->get_if_id(ike_sa, TRUE),
 			.if_id_out_def = ike_sa->get_if_id(ike_sa, FALSE),
+			.cpu = CPU_ID_MAX,
 		};
 
 		INIT(entry,