OVA enhancements

[t-aleksander]

• Adds some new tests to our OVA logic
• Makes defguard launch more reliable, no longer depends solely on the cloud init kickstart, the launch script will be also triggered by regular system boot (even without cloudinit drive)
• Whitelists wg* interfaces in docker drop rules, so setting up routing should be easier