tls: improve wildcard matching (envoyproxy#11921) (envoyproxy#11927)

Patching in 11885 with runtime guards and release notes

Risk Level: Medium (changes to cert matching)
Testing: new unit test
Docs Changes: n/a
Release Notes: inline
Runtime guard: envoy.reloadable_features.fix_wildcard_matching

Signed-off-by: Yann Soubeyrand <[email protected]>
Signed-off-by: Alyssa Wilk <[email protected]>
Signed-off-by: Piotr Sikora <[email protected]>

docs: 1.14.3 release notes. (envoyproxy#187)

Signed-off-by: Piotr Sikora <[email protected]>

docs: 1.13.3 release notes. (envoyproxy#186)

Signed-off-by: Piotr Sikora <[email protected]>

docs: 1.12.5 release notes. (envoyproxy#185)

Signed-off-by: Piotr Sikora <[email protected]>

docs: 1.14.2 release notes. (envoyproxy#11491)

Signed-off-by: Piotr Sikora <[email protected]>

docs: 1.13.2 release notes. (envoyproxy#11490)

Signed-off-by: Piotr Sikora <[email protected]>

docs: 1.12.4 release notes. (envoyproxy#11489)

Signed-off-by: Piotr Sikora <[email protected]>

Fix static shared_ptr in request id extension (envoyproxy#10713)

Signed-off-by: Asra Ali <[email protected]>

release: prepare for v1.14.0 (envoyproxy#10699)

Signed-off-by: Matt Klein <[email protected]>