Add new virtual port category net-vpn to documentation

I'm still not sure who's responsible on this but in fact virtual category
is already implemented at r508887 with portmgr approval. I'm assembling the
rest of the parts documentation.

PR: 239395
Submitted by: meta (myself)