Add an option to filter TUN interface (similar to mitmproxy)

Provide a way to run AdGuard CLI in TUN mode similarly to how it's done in mitmproxy:
https://docs.mitmproxy.org/stable/concepts/modes/#tun-interface

In this mode the users will be able to route the traffic there using local routing table instead of iptables rules.