Fix changelog and API docs (#25797)

Signed-off-by: rulex123 <erica.manno@gmail.com>

Mirrored from https://github.com/envoyproxy/envoy @ e515b02318e55f7f8bcef8db1fde21c1d46990b0

envoy/extensions/filters/http/ext_authz/v3/ext_authz.proto

@@ -258,6 +258,8 @@ message AuthorizationRequest {
 
   // Authorization request includes the client request headers that have a correspondent match
   // in the :ref:`list <envoy_v3_api_msg_type.matcher.v3.ListStringMatcher>`.
+  // This field has been deprecated in favor of :ref:`allowed_headers
+  // <envoy_v3_api_field_extensions.filters.http.ext_authz.v3.ExtAuthz.allowed_headers>`.
   //
   // .. note::
   //
@@ -272,8 +274,6 @@ message AuthorizationRequest {
   //   <envoy_v3_api_field_extensions.filters.http.ext_authz.v3.ExtAuthz.with_request_body>`
   //   setting) hence the value of its ``Content-Length`` reflects the size of its payload size.
   //
-  //   This field has been deprecated in favor of :ref:`allowed_headers
-  //   <envoy_v3_api_field_extensions.filters.http.ext_authz.v3.ExtAuthz.allowed_headers>`.
   type.matcher.v3.ListStringMatcher allowed_headers = 1
       [deprecated = true, (envoy.annotations.deprecated_at_minor_version) = "3.0"];