Multiple Ext Auth At gateway Level

*Description*:

On the same gateway at a gateway level want to be able to use different authnz for both browser and m2m.

I see work was already done here for https://github.com/envoyproxy/gateway/issues/2496 OIDC but this does not work in places which use normal cookie systems.

I am using Ory as a example here.

The example here is using a Ory Network login Cookie (Kratos if on prem) to be able to auth on the api as well as using JWT auth for m2m.

The use case is to have the following:
- Ory oathkeeper external auth + OPA external auth
- JWT Auth + OPA External auth ( Yes this could just be combined in one but want to keep rules simple to reuse above)

I can see how to possible do this with a patch policy a bit of a maintenance burden, but I can imagine have different authnz flows should be a common problem.