Support ip tagging of requests

[nezdolik]

Description:
In some cases Gateway operators need to match incoming requests against CIDR ranges (e.g. allow/block lists) and tag them with specific tags (headers) for further processing. It would be useful to introduce support of Envoy's https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/ip_tagging_filter into ClientTrafficPolicy so it could be combined with other policies.

[optional Relevant Links:]

Any extra documentation required to understand the issue.

[nezdolik]

E.g. in one particular use case requests need to be matched against allowlist (CIDR range) and then if match skip ratelimit check.

[arkodg]

relates to #4385