datapath: VLAN actions should use push/pop semantics