Expose new envoy config for skipping JWT validation and just doing claims to headers

[rickducott]

Envoy introduced this, so we could expose it in Gloo. Would be nice to support claims to headers in cases where we already have JWT validation performed elsewhere.