[8.16] Updates docs for and related to the excludedDataTiersForRuleExecution advanced setting

[nastasha-solomon]

Fixes #5925 and https://github.com/elastic/security-docs-internal/issues/47 by updating the explanation for filtering out cold and frozen documents during rule executions and adding the disclaimer about certain rule types and cold/frozen shards.

Previews:

• What's new | Exclude cold and frozen data from rules: Updated summary
• 8.16 release notes | New features: Added a note to the summary for the new excludedDataTiersForRuleExecution advanced setting
• Exclude cold and frozen data from individual rules: Updated title and various parts of the page
• Configure advanced settings | Exclude cold and frozen data from rules: Updated title and added a second note
• Detections and alerts | Limited support for indicator match rules: Expanded the first list item

[github-actions]

A documentation preview will be available soon.

• 🔨 Buildkite builds
• 📚 HTML diff
• 📙 Preview page

Request a new doc build by commenting

• Rebuild this PR: run docs-build
• Rebuild this PR and all Elastic docs: run docs-build rebuild

_{run docs-build is much faster than run docs-build rebuild. A rebuild should only be needed in rare situations.}

_{If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here.}

[marshallmain]

With the phrase The best path forward continues to be modifying the index patterns to only use hot tier data., are we specifically intending to reference guidance that we've provided before? An alternative might be The best path forward is to modify the index patterns to only use hot tier data..

Also @yctercero do we have a specific modification we can provide that works across the board, e.g. -partial* to exclude frozen indices? Do we know if that would work everywhere? Users might read "just modify your index patterns" and think that's a monumental task unless we have an easy specific change they can make.

[benironside]

Left a few minor comments which may or may not be helpful! Lmk when you're ready for an approval