Add the support of configuring clock_skew_seconds in requestAuthentication

[freedomljc]

(This is used to request new product features, please visit https://github.com/istio/istio/discussions for questions on using Istio)

Describe the feature request
It's to make clock skew configurable when validating jwt token, which has been supported in envoy for a while( search clock_skew_seconds in https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/jwt_authn/v3/config.proto).

Describe alternatives you've considered

Create envoy filter to patch jwt_authn filter. However, as the Merge operation in envoy filter replaces the entire provider proto message, all fields would be needed to be re-claried which causes to require specifying the jwks_keys by default.

Affected product area (please put an X in all that apply)

[ ] Ambient
[ ] Docs
[ ] Dual Stack
[ ] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Extensions and Telemetry
[x] Security
[ ] Test and Release
[x] User Experience
[ ] Developer Infrastructure

Affected features (please put an X in all that apply)

[ ] Multi Cluster
[ ] Virtual Machine
[ ] Multi Control Plane

Additional context

[freedomljc]

To start with, I just created istio/api#3710 for updating the requestAuthentication API to support additional field: istio/api#3710.
Once it's aligned, we can create another PR for updating istiod implementation to consume the new field.