Enrichments Array on an OCSF object's level

[a-fishman]

Add Enrichments Array on an OCSF object's level.

Enrichments is needed in Evidence Artifact's objects in Detection findings.
We can add the same Enrichments Array as we have on Detection finding level, but we can include it inside OCSF Object (Evidence Artifact's object) level.

Why it's important?

1. Not all attributes can be mapped directly in Evidence object, there could be some additional attributes, that's relevant for specific objects (like user-agent in src_endpoint(Network Endpoint object) for web-communication).
2. During addtional investigation when you need to add additional enrichments for this Evidence objects' attributes, you don't have place to do it by now.

Detection Finding's Enrichment's array can't be used for that because it doesn't have 'link' to exact object in Evidence Artifacts.
For example you want to put 'user-agent' there, but you can't clearly indicate if it's for src_endpoint or dst_endpoint