config: validating duration wkt using Envoy validator

[adisuissa]

Commit Message: config: validating duration wkt using Envoy validator and restricting durations to 292 years. Additional Description: Stricter validation of a google.protobuf.Duration field in a config, rejecting negative values. This can be temporarily reverted by setting runtime guard envoy.reloadable_features.strict_duration_validation to false. Restricting durations to 292 years allows us to have a single validator for both seconds and milliseconds. Risk Level: low Testing: Added unit tests Docs Changes: N/A Release Notes: Added Platform Specific Features: N/A Runtime guard: envoy.reloadable_features.strict_duration_validation

Fixes fuzz issue 65802

[repokitteh-read-only[bot]]

CC @envoyproxy/runtime-guard-changes: FYI only for changes made to (source/common/runtime/runtime_features.cc).

:cat:

Caused by: https://github.com/envoyproxy/envoy/pull/32376 was opened by adisuissa.

see: more, trace.

[kyessenov]

/wait

[adisuissa]

/assign-from @envoyproxy/senior-maintainers

[repokitteh-read-only[bot]]

@envoyproxy/senior-maintainers assignee is @ggreenway

:cat:

Caused by: a https://github.com/envoyproxy/envoy/pull/32376#issuecomment-1967704770 was created by @adisuissa.

see: more, trace.

[KBaichoo]

/wait

For CI, minor comment

[nezdolik]

looks like ci is still failing

[nezdolik]

/wait

[ggreenway]

/wait on CI passing

[ggreenway]

/wait on CI passing

[adisuissa]

Let's wait until v1.30 is cut. /wait-any

[RyanTheOptimist]

/wait

[RyanTheOptimist]

/wait on CI

[adisuissa]

/retest