Add CrowdStrike integration docs

[mavam]

🔍 Problem

• The docs do not cover CrowdStrike Falcon Next-Gen SIEM ingestion.
• Users need guidance for both CrowdStrike HEC/HTTP forwarding and Falcon Data Replicator collection.
• The CrowdStrike HEC terminology can be confused with Splunk HEC, which uses a different Tenzir operator and request contract.

🛠️ Solution

• Add a CrowdStrike integration page with prerequisites, HEC/HTTP to_http examples, FDR SQS/S3 collection, troubleshooting, and related vendor references.
• Add a diagram and sidebar entry so the integration is discoverable.
• Clarify why to_http is used instead of to_splunk for CrowdStrike's HEC/HTTP connector.

💬 Review

• Check the Falcon HEC endpoint shapes and authentication wording against real tenant behavior.
• Check the FDR replay guidance around keep_messages=true, deduplication, and dedicated queues.

[github-actions]

📦 Preview  ·  View →  ·  🟢 Live

_{Verified for f2c73b5  ·  Auto-updates on push}