m365_defender, microsoft_defender_endpoint: extract process.name from process.command_line

* m365_defender: updated process.name ECS mapping in alert, event, and incident
  data streams to extract the process name from process.command_line instead of
  relying on file.name.
* microsoft_defender_endpoint: updated process.name ECS mapping in log data stream
  to extract the process name from process.command_line.

M365 Defender:

* Alert – If process.name already exists, leave it as is. Otherwise, extract it
  from process.command_line(since process.executable is not available here).
* Event – Some pipelines already contain logic to parse process.executable and
  process.name. The script to set process.name from command_line will only be
  used when either of these fields is missing.
* Incident – Both process.name and process.executable are not available.
  Therefore, the script must be used to parse and populate process.name.

Microsoft Defender Endpoint:

* log - Both process.name and process.executable are not available. Therefore,
  the script must be used to parse and populate process.name.