[bojemoi] suricata: rotate eve.json hourly, add eve-cleaner sidecar (24h retention)

Commit `3c0dd23`

suricata.yaml: filetype regular -> rotating, rotate-interval: 1h Creates eve..json files hourly instead of one growing file
dozor stack: add eve-cleaner service (alpine) that deletes rotated eve.json files older than KEEP_HOURS=24h, runs every hour

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com