feat: api key auth forwarding setting

[zhaohuabing]

This is required when

• the client identity needs to be used in a downstream filter or the backend service.
• we want to avoid exposing the API key to the backend service.

fixes: #6461

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 71.11%. Comparing base (fc2766b) to head (90aeea0).
Report is 15 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6444      +/-   ##
==========================================
+ Coverage   70.78%   71.11%   +0.32%     
==========================================
  Files         220      220              
  Lines       37820    37892      +72     
==========================================
+ Hits        26772    26947     +175     
+ Misses       9488     9377     -111     
- Partials     1560     1568       +8     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[zhaohuabing]

/retest