bpf: add helpers to access tunnel metadata