if_ovpn tests: fix route_to test case

• Move the .254 address to the tunnel device so we reply through the tunnel.
• Remove the network route to 'break' routing, which we then 'fix' with pf's route-to, which is the functionality we wanted to test in the first place.

Reported by: markj
Sponsored by: Rubicon Communications, LLC ("Netgate")