[lr/declarative-params] Rework parsing/producing ipsec.conf fragments to be data driven
The import is messed up and recent changes to nm_libreswan_get_ipsec_conf() make it difficult to follow.
Split it up, and reuse as much as possible in parsing/producing paths. Cover it with a test suite.