Feat(eos_cli_config_gen): Add support for connection tx-interface match source-ip for ip security

ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/ip-security.yml

@@ -80,3 +80,4 @@ ip_security:
   key_controller:
     profile: Profile-1
   hardware_encryption_disabled: true
+  connection_tx_interface_match_source_ip: true

python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ip-security.j2

@@ -11,6 +11,10 @@
 
 - Hardware encryption is disabled
 {%     endif %}
+{%     if ip_security.match_source_ip is arista.avd.defined(true) %}
+
+- Match source interface of the IPSec connection is enabled
+{%     endif %}
 {%     if ip_security.ike_policies is arista.avd.defined %}
 
 ### IKE policies

python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-security.j2

@@ -89,4 +89,7 @@ ip security
 {%     if ip_security.hardware_encryption_disabled is arista.avd.defined(true) %}
    hardware encryption disabled
 {%     endif %}
+{%     if ip_security.match_source_ip is arista.avd.defined(true) %}
+   connection tx-interface match source-ip
+{%     endif %}
 {% endif %}

python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ip_security.schema.yml

@@ -198,3 +198,6 @@ keys:
         description: |-
           Disable hardware encryption.
           An SFE restart is needed for this change to take effect.
+      connection_tx_interface_match_source_ip:
+        type: bool
+        description: Match source interface of the IPsec connection.