Support Gateway BackendTLS field

[sjberman]

As an NGF user,
I want to specify backend TLS settings at the Gateway level,
So that I can easily verify multiple backends by setting configuration in a single place.

I believe that the BackendTLS field gets overridden by a BackendTLSPolicy if one exists.

kubernetes-sigs/gateway-api#3563 has some information on this.

Acceptance

• Support the BackendTLS field of the Gateway resource
• ReferenceGrant allows ClientCertificateRef from another namespace to be attached, if specified

[github-actions]

This issue is stale because it has been open 14 days with no activity. Remove stale label or comment or this will be closed in 14 days.