[SentinelOne] add agent.id to all agent related data collected from SentinelOne

[paul-tavares]

Description

Two requests with regards to the SentinelOne Integration:

1. For every document streamed to ES by the integration, if the data is associated with a SentinelOne agent, include the agent's id in the ES document (sentinel_one.[source_type].agent.id)
2. Change the default intervals for the data pulling to 30s for all data streams

Background

Opened as a result of discussion here: #9313 (comment)

Changes requested are in support of Security Solution's Bi-Directional Response Actions feature which enables our SIEM users to send actions to SentinelOne Agents directly from Kibana.

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)