Fix CDS l2 lock blocking node drain

Also consider l2 maintenance label for selecting the nodes to handle the l2 lock. This is required since the scheduling label, i.e. for Octavia the octavia.yaook.cloud/octavia-managers label has to be removed before a node drain to initiate the OvnAgent eviction.

Closes #683 (closed)