Update network_connection_info.uid with examples

[jedmitten]

Provide examples for network_connection_info.uid that seems to provide a field for a network address. It's possible this field has other intended uses as well, but this seems to be the right place so adding some examples.

Based on a conversation in OCSF Slack, #schema https://opencybersecu-lz97379.slack.com/archives/C03C2QPSBPB/p1727259577114689

Related Issue:

#1183

Description of changes:

• Added 3 examples of network connection info uid values to make it clear network addresses are intended to be stored there.

[irakledibm]

lgfm

[jonrau-at-queryai]

Usually I put the following things in network_connection.uid

• Trace ID headers from Amazon CloudFront or AWS ALB (ELBv2): X-Amz-Cf-Id or X-Amzn-Trace-Id header value | https://repost.aws/articles/ARwIyE18vNTbWilWNBF5LBNw/correlating-cloudfront-and-alb-logs-for-end-to-end-transaction-tracing and https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-request-tracing.html
• Flow ID from Suricata EVE logs: https://docs.suricata.io/en/latest/output/eve/eve-json-format.html
• flow_id from Amazon Network Firewall logs, it's technically Suricata underneath the covers AFAIK: https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-logging-contents.html
• You can also concat timestamp and httpRequest detail like a specific trace/flow/session header from Cloud Armor logs https://cloud.google.com/armor/docs/request-logging#security_policy_log_entries
• AWS WAFv2 logs have a requestId I also use https://docs.aws.amazon.com/waf/latest/developerguide/logging-examples.html