Promote the matcher field of the RBAC API to stable (#37678)

Promote envoy.extensions.filters.http.rbac.v3.RBAC.matcher from
`work_in_progress` to stable

Risk Level: Low
Testing: No
Docs Changes: No
Release Notes: No

Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>

Mirrored from https://github.com/envoyproxy/envoy @ 41d8ccc79c4b98104475b55b5639567b14466190

envoy/extensions/filters/http/rbac/v3/rbac.proto

@@ -48,10 +48,8 @@ message RBAC {
   // * If absent, no RBAC enforcement occurs.
   // * If set but empty, all requests are denied.
   //
-  xds.type.matcher.v3.Matcher matcher = 4 [
-    (udpa.annotations.field_migrate).oneof_promotion = "rules_specifier",
-    (xds.annotations.v3.field_status).work_in_progress = true
-  ];
+  xds.type.matcher.v3.Matcher matcher = 4
+      [(udpa.annotations.field_migrate).oneof_promotion = "rules_specifier"];
 
   // Shadow policy for testing RBAC rules without enforcing them. These rules generate stats and logs but do not deny
   // requests. If absent, no shadow RBAC policy will be applied.