auto-merge envoyproxy/envoy[main] into envoyproxy/envoy-openssl[main]

* upstream/main: (30 commits)
  Set status code base on GRPC status code for OpenTelemetry tracers (#36173)
  build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (#36343)
  execution context: refactored the impl to use marco to enable the execution context (#36277)
  Ext_proc: Enable sending body without waiting for header response in STREAMED mode (#35850)
  Ext_proc refactoring: Move stream object from Filter class to client  (#36228)
  cel: add response.backend_latency in CEL attributes (#36292)
  http: add config for max response header size (#36231)
  ci: Boost arm build machines (#36339)
  ci: Fix workaround (#36336)
  ci: Workaround issue where PRs are not triggering tertiary workflows (#36335)
  ci: Github cleanups (#36333)
  build(deps): bump aiohttp from 3.10.5 to 3.10.6 in /tools/base (#36319)
  ci: Fix emacs fu (#36330)
  ci: Dont setup docker on macos (#36329)
  repo/ci: Shift remaining CI -> github (#35904)
  build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 (#36321)
  build(deps): bump distroless/base-nossl-debian12 from `4cc93c5` to `e130c09` in /ci (#36322)
  postgres_filter: fix build error on m1 (#36274)
  bazel/ci: Fix distribution build (#36320)
  Add `ClientSideWeightedRoundRobin` LB Policy. (#35905)
  ...