Detect pass alert/v2

[victorjulien]

This implements an alert keyword, as the opposite of the noalert keyword. It allows rules that pass-then-alert.

https://redmine.openinfosecfoundation.org/issues/5466

SV_BRANCH=https://github.com/OISF/suricata-verify/pull/1579

[codecov[bot]]

Codecov Report

Attention: 3 lines in your changes are missing coverage. Please review.

Comparison is base (1dcf69b) 82.19% compared to head (0175cba) 82.08%.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #10154      +/-   ##
==========================================
- Coverage   82.19%   82.08%   -0.11%     
==========================================
  Files         974      974              
  Lines      271825   271838      +13     
==========================================
- Hits       223416   223131     -285     
- Misses      48409    48707     +298     

Flag	Coverage Δ
fuzzcorpus	62.67% <73.91%> (-0.35%)	:arrow_down:
suricata-verify	61.40% <91.30%> (-0.02%)	:arrow_down:
unittests	62.85% <70.21%> (+<0.01%)	:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

[suricata-qa]

ERROR:

ERROR: QA failed on ASAN_TLPR1_suri.

Pipeline 17490

[suricata-qa]

Information:

ERROR: QA failed on SURI_TLPW1_suri_time.

field	baseline	test	%
	SURI_TLPW1_stats_chk
.uptime	137	146	106.57%

Pipeline 17491

[catenacyber]

Any update on this ?

[suricata-qa]

ERROR:

ERROR: QA failed on SURI_TLPW1_suri_time.

ERROR: QA failed on SURI_TLPW1_stats_chk.

Pipeline 17491

[victorjulien]

replaced by #10157