Convert system/security data_stream processing to ingest node

This data stream uses Beats processors for almost all of its data processing.  We want to move that processing in to the ingest node pipeline that is part of the package to make it easier to reuse.

- [x] All beats processors are removed
- [x] [Pipeline tests](https://github.com/elastic/elastic-package/blob/master/docs/howto/pipeline_testing.md) added