This release cherry-picks commits from the main branch into the
release/v2.161 branch, including fixes for multicluster gateways. This
change does NOT include changes to the proxy's TLS infrastructure, as
these changes are not backwards-compatible.