Description
firewallEventsAdaptive raw events plus metrics; doc-0004 firewall section field superset.
Acceptance Criteria
- #1 Parity with doc-0004 firewall section
- #2 Severity mapped to OTel SeverityNumber
Definition of Done
- #1 just check (fmt-check, lint, vet, test, tidy-check, build, vuln)
- #2 just ci before a change that touches the Dockerfile, goreleaser or the image (adds snapshot + image)
- #3 Every new signal or attribute name declared in internal/semconv and listed in docs/signals.md