auto-merge envoyproxy/envoy[main] into envoyproxy/envoy-openssl[main]

* upstream/main:
  repo/ci: Shift remaining CI -> github (#35904)
  build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 (#36321)
  build(deps): bump distroless/base-nossl-debian12 from `4cc93c5` to `e130c09` in /ci (#36322)
  postgres_filter: fix build error on m1 (#36274)
  bazel/ci: Fix distribution build (#36320)
  Add `ClientSideWeightedRoundRobin` LB Policy. (#35905)
  opentelemetrytracer: avoid exporting when there are no spans (#36313)
  bazel/rbe: Fix auth for arm job (#36315)
  mac/ci: Remove debugging (#36302)
  Remove some Undefined Behavior (#36288)
  listener: more exception cleanup (#36198)
  Adding new code owner for ext_proc filter (#36307)
  bazel/ci: Mark builds with Engflow pool requirements (#36300)
  bazel/ci: Use workspace rather than action envs for fake scm revision (#36298)
  arm/ci: Fix RBE authentication issue (#36304)
  test: disabling flake (#36287)