Multiple Vary HTTP headers or one combined?

Both are valid (and mean the same thing).

And no, the W3C isn't relevant here. You will need to look into the IETF RFCs 7230 and 7231.