[8.16] Filtering out cold and frozen data tiers during rule execution

[nastasha-solomon]

Fixes #5483

NOTE: Serverless docs don't need to be updated because the advanced setting wasn't added to Serverless, and data tiers are unavailable in Serverless.

Previews:

• Configure advanced settings | Exclude cold and frozen data from rule executions: New section that explains how to configure the advanced setting.
• Create a detection rule: Expands the tip at the start of the topic to let users know how to exclude cold and frozen tier data via the new excludedDataTiersForRuleExecution advanced setting or by adding a DSL filter.
• Exclude cold and frozen data from a rule: New topic that explains how to add a DSL filter that filters out cold and frozen data for individual rules.

[github-actions]

A documentation preview will be available soon.

• 🔨 Buildkite builds
• 📚 HTML diff
• 📙 Preview page

Request a new doc build by commenting

• Rebuild this PR: run docs-build
• Rebuild this PR and all Elastic docs: run docs-build rebuild

_{run docs-build is much faster than run docs-build rebuild. A rebuild should only be needed in rare situations.}

_{If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here.}

[mergify]

This pull request does not have a backport label. Could you fix it @nastasha-solomon? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• v7.x is the label to automatically backport to the 7.x branch.
• v7./d./d is the label to automatically backport to the 7./d branch. /d is the digit

NOTE: backport-skip has been added to this pull request.

[joepeeples]

Added a few thoughts, but this would also be fine to merge with just the line-edit suggestions applied. Thanks!

[nastasha-solomon]

run docs-build