Vouch request: aeilot

[aeilot]

What do you want to work on?

I want to fix #4915 which fixes the OCSF 1.8.0 formatting issues. Specifically, for supervisor events, I moved container to device.container. For gateway events, I put container under resources. For authentication, there was no container information included. I changed the Event data structures and the EventContext and builders. Since image objects require the uid information, I used existing docker and podman codes to fetch the uid information.
For Kubernetes, the runtime image ID is not available when Supervisor registration is created. I omit the image field for now. A follow-up PR may implement this asynchronously. Also, I omit image when there isn't one.
I also updated the documentation to reflect this updated OCSF data. For verification, I added tests for this new format and uid fetching.

Why this change?

The top-level field container is undefined in OCSF 1.8.0 event classes. Strict consumers will not accept these records. I updated the design as suggested and with minimal changes.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md

[krishicks]

/vouch

[github-actions[bot]]

@aeilot has been vouched by @krishicks.

You can now submit pull requests to OpenShell. Welcome aboard.

Please read CONTRIBUTING.md before submitting.