net/sfc: support DROP action in flow API