tuntap: recommend upstream signed binary.

We have an upstream signed binary available! Big big love to Mattias
for this.

This PR converts all the existing tuntap dependencies into
binary-friendly tuntap dependencies, and adds a tuntap dependency to
requirements to look for the kexts.

Closes #33894.

Signed-off-by: Mike McQuaid <mike@mikemcquaid.com>