add processor tags and preserve_original_event on failure (1/4) - #20572

ssi: add processor tags and preserve_original_event on failure (1/4)

Tag every ingest pipeline processor across 51 SSI-owned packages
(1password through entityanalytics_entra_id), so that failure telemetry
can attribute an error to the step that produced it rather than
collapsing same-type processors into one bucket. All 25752 processors
across the 303 pipeline files now carry a tag, 10853 of them newly,
including those nested inside `on_failure` handlers and `foreach`
bodies, and those in the pipeline-level `on_failure` block.

Every processor gets a tag of the form `<descriptive_name>_<8hex>`,
where the 8-hex suffix is a content hash over the processor body and
its enclosing context. Identical constructs in identical surroundings
produce the same hash in every package, giving each tag a stable global
identity in failure telemetry. Tags that already carried a hash are
left byte-identical -- 3275 of them, in aws, crowdstrike and axonius,
which shipped tags before this series; a hash is only meaningful
relative to the generator that produced it, so re-hashing a published
tag churns a value consumers may key off. Those three packages therefore
keep the earlier suffix format. Tags that would have said nothing
(`script_<hash>`, `fail_<hash>`) are seeded from the processor's
description, name, message or preceding comment, and tags whose leading
word named the wrong action (`set_...` on an append) are corrected.

Add preserve_original_event to pipeline-level on_failure handlers that
were missing it, ensuring the raw payload is retained when a pipeline
error document is indexed. Sixteen of the 51 packages needed it.

Six processors across five packages were exact duplicates of an earlier
sibling and could never have any effect; they are removed rather than
given a disambiguating tag. Five further fixes ride along, each in the
affected package's changelog:

  - aws, aws_bedrock: five pipeline-level on_failure handlers set
    error.message instead of appending, discarding what processor-level
    handlers recorded. error.message is now an array on failed
    documents.
  - azure: the aadgraphactivitylogs link to the shared pipeline is
    refreshed, since tagging that pipeline changed its checksum.
  - carbon_black_cloud/watchlist_hit: the append_related_hosts processor
    was gated on ctx.host?.hostname but appended user.domain; guard
    corrected to ctx.user?.domain, matching alert_v7 and endpoint_event.
  - azure/signinlogs: tag azure-json-keys-to-snake-case renamed to
    azure_json_keys_to_snake_case (hyphens are not valid in tag names).
  - claroty_ctd/event: tag script_to_drop_N/A_values_fields renamed to
    script_to_drop_NA_values_fields (slash is not a valid identifier
    character).

These are enhancements, so the packages take a minor version bump.

Updates #20558