tls: input: output: Provide restoring way for tls.verify hebavior

[cosmo0920]

Closes #8959.

The previous enforced hostname verification with tls.verify breaks some of the certificates
for kubelet. We should restore functionality and make opt-in feature for hostname verification in TLS.

---

Enter [N/A] in the box, if an item is not applicable to your change.

Testing
Before we can approve your change; please submit the following in a comment:

• Example configuration file for the change
  Same as in TLS security issue: tls.verify is not validating host subject alternative name #8072. But it needs to add tls.verify_hostname on for hostname verification.

• Debug log output from testing the change

• Attached Valgrind output that shows no leaks or memory corruption was found

If this is a change to packaging of containers or native binaries then please confirm it works for all targets.

• Run local packaging test showing all targets (including any new ones) build.
• Set ok-package-test label to test for all targets (requires maintainer to do).

Documentation

• Documentation required for this feature

fluent/fluent-bit-docs#1393

Backporting

• Backport to latest stable release.

---

Fluent Bit is licensed under Apache 2.0, by submitting this pull request I understand that this code will be released under the terms of that license.

[fcuello-fudo]

While at it maybe you also want to fix the typo on line 653 ?

[edsiper]

@cosmo0920 thanks, pls submit a backport for 3.0 branch too.

[cosmo0920]

@cosmo0920 thanks, pls submit a backport for 3.0 branch too.

Hi, #8967 is a backport PR to be corresponding to this. :)