Use connection tunneling internally

[makhov]

Currently, we use "normal" kubeconfig in k0smotron for some features like dynamic config updating and providerID controller.
But the workload cluster can have externalAddress, which is not accessible from the management one. In this case, we can use a kubeconfig for tunneling (if it's enabled)

https://docs.k0smotron.io/stable/capi-controlplane-bootstrap/?h=tunneling#client-connection-tunneling

[github-actions]

The issue is marked as stale since no activity has been recorded in 30 days