vsphere: populate ECS source.ip and related.ip from client.ip in log ingest pipelines

[Copilot]

vCenter login/logout/failed login/SSH/upload events extract the initiating IP into client.ip but never propagate it to the ECS correlation fields source.ip and related.ip, breaking cross-dataset IP correlation and ECS compliance.

Issue: #18537

Changes

• ingest_pipeline/login.yml and ingest_pipeline/file.yml: append two processors at the end of each pipeline:

- set:
    field: source.ip
    copy_from: client.ip
    if: ctx.client?.ip != null
- append:
    field: related.ip
    value: "{{client.ip}}"
    allow_duplicates: false
    if: ctx.client?.ip != null

• test-format-common.log-expected.json: updated all 24 test cases that assert client.ip to also assert source.ip and related.ip.
• manifest.yml / changelog.yml: bumped package version 1.23.1 → 1.24.0.