Test fix for [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass in release/1.4.x

[hc-github-team-consul-core]

Backport

This PR is auto-generated from #4385 to be assessed for backporting due to the inclusion of the label backport/1.4.x.

:rotating_light:

Warning automatic cherry-pick of commits failed. If the first commit failed, you will see a blank no-op commit below. If at least one commit succeeded, you will see the cherry-picked commits up to, not including, the commit where the merge conflict occurred.

The person who merged in the original PR is: @zalimeni This person should manually cherry-pick the original PR into a new backport PR, and close this one when the manual backport PR is merged in.

merge conflict error: POST https://api.github.com/repos/hashicorp/consul-k8s/merges: 409 Merge conflict []

The below text is copied from the body of the original PR.

---

Changes proposed in this PR

Supports changes in https://github.com/hashicorp/consul/pull/21816 with CRD updates:

• crd: support L7 intentions header match contains and ignoreCase
• crd: support mesh http.incoming.requestNormalization
• crd: generate updated CRDs
• crd: remove requirement for mesh http.sanitizeXForwardedClientCert

How I've tested this PR

• Added unit tests
• Manually spun up cluster in kind and validated both changes are reflected in xDS / config when created as CRDs

How I expect reviewers to test this PR

👀 + spot check me on the CRD update process in case I missed a step. It's been a while since I've done one of these.

Checklist

• [x] Tests added
• [x] CHANGELOG entry added

---

Overview of commits

- 2d3d34e5548ad6f6ee3e7c502bcab6af271ae152

[hashicorp-cla-app[bot]]

All committers have signed the CLA.