[Rule Tuning] Update Azure / M365 Index Patterns and Lookback Windows

[terrancedejesus]

Azure & M365 rules have inconsistent index patterns and lookback windows. We should adjust these not only for consistency but performance.

Index Patterns:

• Update all index patterns to logs-[INTEGRATION].[DATASTREAM]-*. These keeps them consistent and more performant as some are not scoped properly such as logs-azure.*
• Update all lookback windows and intervals (if applicable). Many rules have inconsistent lookback windows between 9m-25m. These are commonly now-9m with a default interval of 5m. This keeps a rolling window of any potential missed events since last execution. NOTE: Deduplication is handled upstream for all but ESQL-based rules.