testdata: replace legacy captures with anonymized tscap output

Drop the old testdata/{acl,grant,routes,ssh}_results/ files (mixed
uppercase ACL-*/ROUTES-*/GRANT-*/SSH-* filenames with the pre-tscap
schema) and replace with the 617 captures tscap produced for the
kradalby/3157-subnet-to-subnet branch. Files are lowercase and
anonymized (odin/thor/freya users, pokemon hostnames) per
kradalby/tscap package anonymize.

Relax pre-commit check-added-large-files: tscap captures include full
netmaps and can exceed 500 KB per file; testdata/ is now excluded
from the size check and the global ceiling is bumped to 2 MB.

Source: github.com/kradalby/tscap @ cb375ec

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.pre-commit-config.yaml

@@ -13,6 +13,8 @@ repos:
     rev: v6.0.0
     hooks:
       - id: check-added-large-files
+        args: [--maxkb=2000]
+        exclude: ^hscontrol/policy/v2/testdata/
       - id: check-case-conflict
       - id: check-executables-have-shebangs
       - id: check-json