Preserve stream direction across srtp_update

Keep existing stream directions unchanged when srtp_update rebuilds
specific streams, and reject wildcard template updates that attempt to
flip inbound/outbound direction.

Add regression coverage for specific and template-derived streams to
verify direction preservation and template direction mismatch rejection.