This reverts commit 84c64d07.
Full LTO make kernel crash

dockerd requires Xtables and nft_compat to use iptable-nft.
This is not ideal but this commit restore xtables to support dockerd

kbuild read them from environment, so only put them as makefile var is not
sufficient

Early makefile patching achieve 2 goals.
Firstly, avoid adding variables to each make call.
Secondly, it is later used by tools (e.g dkms) to build out-of-tree modules.

- Drop Xtables
- Drop MPLS
- Drop DCB
- Drop Openvswitch (because of MPLS requirement)
- Add IPv6 multicast support

- Backport fix about USB hub enumeration

- Fix tarball name
- Restore build for untagged tarballs

This make it fail to boot.

- fix perms
- strip kernel and executables
- include all headers (e.g: missing vdso/const.h)
- provides VIRTUALBOX-GUEST-MODULES WIREGUARD-MODULE
- remove documentation
- remove sources broken symlinks
- remove sources lost objects

Security patches inside !