Backport of [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass into release/1.4.x

[hc-github-team-consul-core]

Backport

This PR is auto-generated from #4385 to be assessed for backporting due to the inclusion of the label backport/1.4.x.

🚨

Warning automatic cherry-pick of commits failed. If the first commit failed,
you will see a blank no-op commit below. If at least one commit succeeded, you
will see the cherry-picked commits up to, not including, the commit where
the merge conflict occurred.

The person who merged in the original PR is:
@zalimeni
This person should manually cherry-pick the original PR into a new backport PR,
and close this one when the manual backport PR is merged in.

merge conflict error: POST https://api.github.com/repos/hashicorp/consul-k8s/merges: 409 Merge conflict []

The below text is copied from the body of the original PR.

---

Changes proposed in this PR

Supports changes in hashicorp/consul#21816 with CRD updates:

• crd: support L7 intentions header match contains and ignoreCase
• crd: support mesh http.incoming.requestNormalization
• crd: generate updated CRDs
• crd: remove requirement for mesh http.sanitizeXForwardedClientCert

How I've tested this PR

• Added unit tests
• Manually spun up cluster in kind and validated both changes are reflected in xDS / config when created as CRDs

How I expect reviewers to test this PR

👀 + spot check me on the CRD update process in case I missed a step. It's been a while since I've done one of these.

Checklist

• Tests added
• CHANGELOG entry added

---

Overview of commits

• 2d3d34e

[hashicorp-cla-app]

All committers have signed the CLA.