Add and expose IPsec tunnel migration feature flag

This patch adds a feature flag for IPsec tunnel migration. This
implies XFRM_MIGRATE enabled in the kernel.

Bug: 169169973
Test: make update-api
Change-Id: I216ae2863a6c712f8eb2b9405674a45e0a19e888