feat: disable HTTP/2 ALPN handshake for connections on routes configured with AI-proxy.

[oowl]

Summary

This change will disable HTTP/2 ALPN handshake for connections on routes configured with AI-proxy.

The following are the specific changes

• move tls related function kong/tls/plugins/certificate.lua and kong/tls/plugins/sni_filter.lua from ee to ce repo
• Based on feat(patch): add tls.disable_http2_alpn() function needed patch for disabling HTTP/2 ALPN when tls handshake. #13709 and feat: introduce tls.disable_http2_alpn() function lua-kong-nginx-module#93, we introduce the disable_http2_alpn action in the ai-proxy plugin to solve the ai-proxy plugin did not work in HTTP2 case. After the current PR is merged, HTTP/2 ALPN handshakes will be disabled for requests on routes configured with AI-proxy, and all these connections will fall back to the http1.1 protocol.

Checklist

• The Pull Request has tests
• A changelog file has been created under changelog/unreleased/kong or skip-changelog label added on PR if changelog is unnecessary. README.md
• There is a user-facing docs PR against https://github.com/Kong/docs.konghq.com - PUT DOCS PR HERE

Issue reference

AG-119

[fffonion]

lgtm except a minor naming comment

[catbro666]

The current solution (based on snis on the routes entity) isn't compatible with expressions router, as the mtls-auth plugin already faces. Please see https://konghq.atlassian.net/browse/FTI-6227 for more details. I suggest considering this PR along with FTI-6227, otherwise it may be difficult to deal with in the future.

[ms2008]

This is actually related to the mtls-auth plugin, and we may need to refactor here as well.

[windmgc]

Approving to unblock the 3.9 planning.
This will be refactored later

[team-gateway-bot]

Cherry-pick failed for master, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git remote add upstream https://github.com/kong/kong-ee
git fetch upstream master
git worktree add -d .worktree/cherry-pick-13735-to-master-to-upstream upstream/master
cd .worktree/cherry-pick-13735-to-master-to-upstream
git checkout -b cherry-pick-13735-to-master-to-upstream
ancref=$(git merge-base 6d7bf6819fc4a253fe80b12b5a5f1f6ec8f342dc 30414a664f54b187e9e2e39f65d81b2cff68948c)
git cherry-pick -x $ancref..30414a664f54b187e9e2e39f65d81b2cff68948c

[oowl]

offline discussion with @ms2008 @catbro666 @dndx
considered https://github.com/Kong/kong-ee/pull/10510 as a temporary solution for the mtls plugin ( ATC route expression route can not scan all the route sni match results, so the change of 10510 can not apply to ee master branch), now we merge the current PR to 3.9 release and then follow the refactor when the 10510 change merge to the master branch. (after 3.9)