Place JWTRule under RequestAuthentication like every other API (#3187)

There is no reason for this to be split, it just makes the docs more
confusing.

I am fairly sure this change only impacts the HTML, merging two pages
into one. I tested with istio.io/istio still builds fine.

Author: howardjohn