kernel: migrate wireguard into the kernel tree