Add OFP_BSN_PKTIN_FLAG_INGRESS_ACL pktin flag.

Reviewer: @rlane

This lets us differentiate packet-ins from the ingress ACL table.