Track upstreaming of Envoy Bazel Registry modules to BCR and source repos

This parent issue tracks the upstreaming progress for all modules in envoyproxy/toolshed's Bazel registry. Sub-issues will be created for each module@version covering:
- Migration to Bazel Central Registry (BCR)
- Any required upstreaming to source repo (especially for MODULE.bazel changes)
- Coordination on version, overlays/patches, dependencies, and blockers
- Status and links to PRs/issues in BCR or upstream sources

**Sub-issues will include:**
- Module name & version
- BCR status (exists/needs new)
- Source repo status (overlay/needs MODULE.bazel)
- Checklist: compare toolshed and BCR, create PRs, coordinate with upstream, update envoy
- Notes on blockers/dependencies

**Use this issue for discussion, tracking status, and linking all upstreaming efforts.**