feat(gatewayapi): add Gateway API RBAC for L7 log collector (#4282)

[electricjesus]

pick of #4282 and #4309

Commit 1 (#4282):

Extends the waf-http-filter ClusterRole to include Gateway API permissions needed by the l7-log-collector sidecar for log enrichment.

The L7 Log Collector watches Gateway API resources (Gateways, HTTPRoutes, GRPCRoutes) and core resources (Pods, Services) to enrich access logs with Gateway context information.

This approach reuses the existing ServiceAccount shared by WAF and l7-log-collector containers in the EnvoyProxy deployment.

Commit 2 (#4309):

Update the CRDs using the makefile

Closes https://tigera.atlassian.net/browse/EV-6273

Release Note

TBD

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.