Connection tracking garbage collection

A linear conntrack scan holds Cilium pod setup for 80 seconds at Adyen's peak

Adyen traced sandbox setup failures on its big data clusters to a garbage collector that walks every tracked connection in order, which turns the table-size knob you raised for headroom into part of the fault.