[feature request] HCM option to enforce that host header is allowed by the cert served

[lambdai]

Http host (or :authority in h2) header should match dns name in Subject Alternative Name.

To be clear, the dns name is not SNI that are referred by FilterChainMatch and filled by tls_inspector listener filter.

[github-actions]

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in the next 7 days unless it is tagged "help wanted" or "no stalebot" or other activity occurs. Thank you for your contributions.

[github-actions]

This issue has been automatically closed because it has not had activity in the last 37 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted" or "no stalebot". Thank you for your contributions.