Provide alternative version of helper functions for dispatch vs passive program types

KeGetCurrentIrql is relatively expensive, but can be avoided if the function can be guaranteed that the caller is at dispatch already.

One option:
Provide two versions of helper functions, one that assumes IRQL == dispatch and one that assumes IRQL <= dispatch.

Based on the required_irql in the ebpf_program_data_t, select one of the two possible helper functions.

Start by tracing the helper functions that call KeGetCurrentIrql and inspect ebpf_program_data_t, especially required_irql. Determine how dispatch and passive program types are identified, then define the completion criteria as selecting the appropriate helper version without the unnecessary IRQL query.

Written by the indexing model from the issue text.