docs: update ingress_rule description of cloudflare_tunnel_config

[josip-stanic]

Update ingress_rule description of cloudflare_tunnel_config in schema to highlight that last rule must be all matching (unsure whether this well render well the provider docs but it should be mentioned). We came across this as well in our module: https://github.com/avaloqcloud/terraform-cloudflare-service-publishing/blob/main/variables.tf#L278.

workflow/skip-changelog-entry label should be added.

fixes #2920

[github-actions]

Oops! It looks like no changelog entry is attached to this PR. Please include a release note as described in https://github.com/cloudflare/terraform-provider-cloudflare/blob/master/contributing/changelog-process.md.

Example:

```release-note:TYPE
Release note
```

If you do not require a release note to be included and you have permission, please add the workflow/skip-changelog-entry label. Otherwise, a maintainer will add the label or ask you for one when they review the PR.

[github-actions]

This functionality has been released in v4.34.0 of the Terraform Cloudflare Provider.

Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!