Reachable-address logic for direct connections

Arti would benefit from something like Tor's ReachableAddresses. We may want to split it into something like "Do not expect connections to these addresses to work" and "Do not ever attempt connections to these addresses".