[Security Solution] Related Integrations title doesn't always match title shown in Fleet Integrations UI

[spong]

As discussed in #152055 (comment), now that we're querying for all the packages, we should be able to resolve the appropriate Package/Integration Title within the Related Integrations UI in Security.

Currently we're trying to reconstruct it from the policy_template, and this doesn't always match what is displayed in the Fleet Integration UI. For example, the o365-1.3.0 package displays as Office 365 Logs in Fleet:

However we resolve it as O365 in our UI's:

Note: This fix could be more involved if assuming a large number of uninstalled integrations. Probably not reasonable to return titles for all integrations(?), so may need to pass the rule's integrations to our API and only return those? Alternatively, perhaps we just need to add them to the prebuilt rules?

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[banderror]

Here's a note about that from the epic:

If a related integration is not installed, we might show an incorrect title. We get integration titles from Fleet via our installed integrations endpoint. If an integration is not installed, we don't return its data => don't get the correct title.

Now that we fetch all existing Fleet integrations (bot installed and not installed) in this endpoint, we could:

1. Either return all of them in the response
2. Or, as @spong suggested in the description, pass package names in the request parameters to this endpoint, so that it will return info about all their integrations.

I'd vote for the 2nd option.

Also, for the Rule Management page, we could do it a bit differently. When fetching integration data on the Management page, we could omit passing any package names in the request parameters. Then, the endpoint would find the names of all related packages of all rules in the current Kibana space (we can do this now efficiently because we have support for aggregations in the RulesClient). Using these package names, fetch data for all those packages and their integrations.

I think this would also fix #134625

[jkelas]

@banderror
After analysis of the code I have a few findings:

• The endpoint in question is not used any more. We no longer use /fleet/integrations/installed endpoint. As of today we use /fleet/integrations/all, which was introduced in PR 178295 in May 2024.
• I cannot see the issue from the description of this ticket. Both the Fleet UI and our UI show the same name (title) which is Microsoft Office 365, the behavior seems correct. See the point below, however.
• There is a different issue, which might require a separate ticket. Although we display properly Microsoft Office 365 in our UI and this is consistent with what is displayed in Fleet (Integrations page), when I click the integration name (trying to install it), it takes me to a page that says Microsoft 365, has different version (2.0.0 instead of 2.8.0) and says Version 2.0.0 is out of date. The latest version of this integration is available to be installed.
  Please see the video: https://github.com/user-attachments/assets/9dd3d151-148c-4a1c-8fbe-d391a8870dc8