Support notify/inspection hooks

We should support read-only hooks in netebpfext which are only allowed to read the event details, not to allow/block them.
- This will support observability use-cases while making the read-only behavior explicit.
- This will also avoid observabiity bpf programs needing to deal with attach order and short-circuiting on block (every attached notify program will always be invoked).

Original comment:

our bpf solution (not necessarily the bpf program) would really want to know if this is occurring as this configuration breaks much of what our bpf program does.

is there an existing mechanism to communicate with bpf solutions when this occurs?

_Originally posted by @keith-horton in https://github.com/microsoft/ebpf-for-windows/pull/5381#discussion_r3779038420_