Switch the local CLI to use NETCONF over Unix socket

Without this patch, any local user could well reboot the box via an RPC.
That's not what we want. Because sysrepo doesn't do NACM these days,
but delegates that to the netopeer2-server instead, we have to talk
NETCONF in order to validate everything.

Of course this currently Doesn't Work At All™ because netopeer2-server
segfaults, but hey, that's another problem.

Bug: https://github.com/CESNET/netopeer2/issues/821
Bug: https://github.com/sysrepo/sysrepo/issues/2312
Change-Id: I9c100fd73f11b4b6c759ee382e82c9e75f3cea8f
diff --git a/configs/czechlight_clearfog_defconfig b/configs/czechlight_clearfog_defconfig
index 121d256..62cba2d 100644
--- a/configs/czechlight_clearfog_defconfig
+++ b/configs/czechlight_clearfog_defconfig
@@ -4,7 +4,7 @@
 BR2_ARM_ENABLE_VFP=y
 BR2_ARM_FPU_NEON=y
 BR2_ENABLE_DEBUG=y
-BR2_STRIP_EXCLUDE_FILES="cla-* netopeer2* sysrepo* libsysrepo* libSysrepo* libnetconf2* libyang* sysrepo-cli veliad-* lldp-systemd-networkd-sysrepod"
+BR2_STRIP_EXCLUDE_FILES="cla-* netopeer* *sysrepo* libSysrepo* *netconf* *yang* velia* lldp-systemd-networkd-sysrepod"
 BR2_STRIP_EXCLUDE_DIRS="/usr/lib/libyang /usr/lib/sysrepo"
 BR2_GLOBAL_PATCH_DIR="$(BR2_EXTERNAL_CZECHLIGHT_PATH)/board/czechlight/common/patches"
 BR2_PER_PACKAGE_DIRECTORIES=y