Decouple stream bypass from TLS encrypted bypass v9

[lukashino]

Following up on #12388

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6788

Describe changes:
v9:

• changed mutex to atomicu8 for SSH encryption handling choice
• rebased

v8.1:

• specify the correct SV test

v8:

• rebased
• re: QA results: Expected behavior change, the QA needs to set ssh encryption handling to bypass to reproduce the same results. There is no middle-ground solution to have the defaults set exactly as before. See comments in Decouple stream bypass from TLS encrypted bypass v7 #12249

v7

• Style guide changes as suggested in the prev PR
• Encryption Handling has now three states, similar to TLS
• rebased

v6

• rebased

v5

• rebased
• added upgrade section
• fixed docs - Thanks Juliana
• SV tests should pass now

v4

• rebased
• changed SSH bypass defaults to hopefully be in sync with the previous settings

v3

• added SSH app-layer option encryption-handling allowing to choose whether to continue inspection on SSH once it turns encrypted
• added SV tests
• minor docs updates

SV_BRANCH=OISF/suricata-verify#2288

[lukashino]

digging up a comment from the previous PR:

@catenacyber wrote:

@victorjulien could I review this ? (asking since you self-assigned yourself)

I want to dig into the QA diff and the explanation of it in the previous version especially...

[github-actions]

NOTE: This PR may contain new authors.

[codecov]

Codecov Report

Attention: Patch coverage is 80.00000% with 8 lines in your changes missing coverage. Please review.

Project coverage is 80.72%. Comparing base (3831843) to head (4061e9c).

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #12572   +/-   ##
=======================================
  Coverage   80.72%   80.72%           
=======================================
  Files         929      929           
  Lines      259062   259094   +32     
=======================================
+ Hits       209119   209148   +29     
- Misses      49943    49946    +3     

Flag	Coverage Δ
fuzzcorpus	56.94% <42.50%> (-0.01%)	⬇️
livemode	19.39% <12.50%> (-0.01%)	⬇️
pcap	44.14% <42.50%> (-0.05%)	⬇️
suricata-verify	63.41% <82.05%> (+0.02%)	⬆️
unittests	58.35% <42.50%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

[lukashino]

Follow-up in #12573