ci: switch kind workflow to new IPsec key system

The global IPsec key system is deprecated[^1], prefer the new per-tunnel
key system. This switches most workflows over to the new system, except
conformance-eks which needs[^2] addressed first.

[^1]: cilium/cilium#33504
[^2]: cilium/cilium#32040

Signed-off-by: Tobias Klauser <tobias@cilium.io>

.github/workflows/kind.yaml

@@ -140,7 +140,7 @@ jobs:
       - name: Install Cilium with IPsec Encryption
         run: |
           kubectl create -n kube-system secret generic cilium-ipsec-keys \
-            --from-literal=keys="3 rfc4106(gcm(aes)) $(echo $(dd if=/dev/urandom count=20 bs=1 2> /dev/null | xxd -p -c 64)) 128"
+            --from-literal=keys="3+ rfc4106(gcm(aes)) $(echo $(dd if=/dev/urandom count=20 bs=1 2> /dev/null | xxd -p -c 64)) 128"
           cilium install \
           --version=${{ env.cilium_version}} \
           --nodes-without-cilium \