Use connection tunneling internally

[makhov]

Currently, we use "normal" kubeconfig in k0smotron for some features like dynamic config updating and providerID controller.
But the workload cluster can have externalAddress, which is not accessible from the management one. In this case, we can use a kubeconfig for tunneling (if it's enabled)

https://docs.k0smotron.io/stable/capi-controlplane-bootstrap/?h=tunneling#client-connection-tunneling