Backport of [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass into release/1.4.x

Backport of [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass into release/1.4.x #5956