fix(ja4ebpf): split bpf2go generate into Ja4Tc + Ja4Ssl, fix RPM systemd-rpm-macros

- Use two separate //go:generate directives (Ja4Tc for tc_capture.c, Ja4Ssl
  for uprobe_ssl.c) to avoid duplicate LICENSE symbol and multi-file clang issue
- Update loader.go to hold tcObjs/sslObjs separately with correct field names:
  UprobeSslSetFd, UprobeSslReadEntry, UretprobeSslReadExit,
  KprobeAccept4Entry, KretprobeAccept4Exit
- Add systemd-rpm-macros to all three RPM build stages (el8/el9/el10)
  so that %{_unitdir} macro resolves correctly
- RPMs now build successfully for el8, el9, el10

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

services/ja4ebpf/bpf/bpf_types.h

@@ -4,9 +4,26 @@
 
 #pragma once
 
+/* vmlinux.h (inclus dans les .c) fournit déjà tous les types kernel (__u32, etc.).
+ * N'inclure linux/types.h que si vmlinux.h n'est pas présent. */
+#ifndef __VMLINUX_H__
 #include <linux/types.h>
+#endif
 #include <bpf/bpf_helpers.h>
 
+/* Constantes TC (linux/pkt_cls.h) — non incluses via vmlinux.h */
+#ifndef TC_ACT_OK
+#define TC_ACT_UNSPEC   (-1)
+#define TC_ACT_OK       0
+#define TC_ACT_RECLASSIFY 1
+#define TC_ACT_SHOT     2
+#define TC_ACT_PIPE     3
+#define TC_ACT_STOLEN   4
+#define TC_ACT_QUEUED   5
+#define TC_ACT_REPEAT   6
+#define TC_ACT_REDIRECT 7
+#endif
+
 /* ---------------------------------------------------------------------------
  * Événement TCP SYN : émis pour chaque nouvelle connexion TCP observée
  * ---------------------------------------------------------------------------*/