Added headers hash for http destinations

What does this MR do and why?

This MR adds a method for us to return headers_hash from any model that composes the ExternallyStreamable concern. It overwrites any attempt to write over X-Gitlab-Event-Streaming-Token which is set to the secret_token (generated or user provided)

This MR also updates the json schema file for HTTP categories, and uses the HTTP RFC-7230 to allow certain characters.

• It is pretty permissive on what is allowed (USASCII, special characters, spaces, etc.)
• An alternative is to use what Cloudflare defines as acceptable header keys and values format: Reference
• It also disallows any 'custom' properties, so only value and active are passable

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

1. Checkout the git branch
2. Create new external streaming destinations using graphql with the category http
3. Open rails console and query for streaming destinations [AuditEvents::Instance::ExternalStreamingDestination]
4. Validate that headers_hash is returned for http category destinations

Example graphql query

mutation CreateInstanceAuditEventStreamingDestination {
  instanceAuditEventStreamingDestinationsCreate(
    input: {
      config: {
        url:"https://gitlab.com/test",
        headers: { key1: { value: "test", active: true } }
      },
      category: "http", 
      secretToken:"my-token-my-token-12345",
    }
  ) {
    externalAuditEventDestination {
      id
      name
      category
      config
    }
    errors
  }
}

Related to #436607 (closed)

ee/app/models/concerns/audit_events/externally_streamable.rb

@@ -6,6 +6,7 @@ module ExternallyStreamable
 
     MAXIMUM_NAMESPACE_FILTER_COUNT = 5
     MAXIMUM_DESTINATIONS_PER_ENTITY = 5
+    STREAMING_TOKEN_HEADER_KEY = "X-Gitlab-Event-Streaming-Token"
 
     included do
       before_validation :assign_default_name
@@ -44,6 +45,15 @@ module ExternallyStreamable
         where.not(id: record_id).where(category: category).limit(MAXIMUM_DESTINATIONS_PER_ENTITY).pluck(:config)
       }
 
+      def headers_hash
+        return {} unless http?
+
+        (config['headers'] || {})
+          .select { |_, h| h['active'] == true }
+          .transform_values { |h| h['value'] }
+          .merge(STREAMING_TOKEN_HEADER_KEY => secret_token)
+      end
+
       private
 
       def assign_default_name