fix(ja4ebpf): split bpf2go generate into Ja4Tc + Ja4Ssl, fix RPM systemd-rpm-macros

- Use two separate //go:generate directives (Ja4Tc for tc_capture.c, Ja4Ssl
  for uprobe_ssl.c) to avoid duplicate LICENSE symbol and multi-file clang issue
- Update loader.go to hold tcObjs/sslObjs separately with correct field names:
  UprobeSslSetFd, UprobeSslReadEntry, UretprobeSslReadExit,
  KprobeAccept4Entry, KretprobeAccept4Exit
- Add systemd-rpm-macros to all three RPM build stages (el8/el9/el10)
  so that %{_unitdir} macro resolves correctly
- RPMs now build successfully for el8, el9, el10

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

old/services/sentinel/docker-compose.test.yml

@@ -0,0 +1,49 @@
+# Docker Compose for integration testing
+# Based on architecture.yml testing.levels.integration
+version: '3.8'
+
+services:
+  # TLS test server for generating test traffic
+  tls-server:
+    build:
+      context: .
+      dockerfile: Dockerfile.test-server
+    image: ja4sentinel-test-server:latest
+    networks:
+      - test-network
+    ports:
+      - "8443:8443"
+    command: ["-port", "8443"]
+
+  # ja4sentinel integration test runner
+  ja4sentinel-test:
+    build:
+      context: .
+      dockerfile: Dockerfile.dev
+    image: ja4sentinel-dev:latest
+    networks:
+      - test-network
+    cap_add:
+      - NET_RAW
+      - NET_ADMIN
+    volumes:
+      - ./test-results:/app/test-results
+    environment:
+      - JA4SENTINEL_INTERFACE=eth0
+      - JA4SENTINEL_PORTS=8443
+    depends_on:
+      - tls-server
+    command: ["make", "test-integration"]
+
+  # Test client that generates TLS traffic
+  tls-client:
+    image: curlimages/curl:latest
+    networks:
+      - test-network
+    depends_on:
+      - tls-server
+    command: ["curl", "-kv", "https://tls-server:8443/"]
+
+networks:
+  test-network:
+    driver: bridge