fix: tests intégration matrix — procps-ng, varnish h2, hitch ALPN, pgrep→ps

- Ajout de procps-ng dans les 4 Dockerfiles runtime (ps/pgrep disponibles)
- Remplacement de pgrep par ps -C dans tous les run-tests.sh
- Correction entrypoint nginx-varnish : pgrep nginx → cat nginx.pid (exit 127)
- Activation HTTP/2 dans Varnish : ajout de -p feature=+http2 dans les
  entrypoints nginx-varnish et hitch-varnish
- Restauration ALPN h2,http/1.1 dans hitch.conf (varnish supporte maintenant h2)
- Correction healthcheck hitch-varnish : curl sans --http1.1 (h2 fonctionnel)
- Correction requêtes phase_verify : http_logs_raw → http_logs, colonnes correctes
- Correction writer clickhouse.go : noms JSON alignés avec la MV (ip_meta_*, tls_sni…)
- Fix toStartOfSecond(DateTime) → toStartOfSecond(toDateTime64(col, 3))
- Retrait du SKIP el8/nginx-varnish (varnish s'installe bien sur AlmaLinux 8)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

tests/integration/apache/run-tests.sh

@@ -49,7 +49,7 @@ stack_verify_extra() {
     # Vérifie que ja4ebpf tourne
     local ja4_pid
     ja4_pid=$(docker compose -f "$COMPOSE_FILE" exec -T platform \
-        pgrep -x ja4ebpf 2>/dev/null | head -1 || echo "")
+        ps -C ja4ebpf -o pid= 2>/dev/null | head -1 || echo "")
     if [ -n "$ja4_pid" ]; then
         pass "Processus ja4ebpf actif (PID $ja4_pid)"
     else
@@ -59,7 +59,7 @@ stack_verify_extra() {
     # Vérifie que httpd tourne
     local httpd_count
     httpd_count=$(docker compose -f "$COMPOSE_FILE" exec -T platform \
-        pgrep -c httpd 2>/dev/null || echo "0")
+        ps -C httpd -o pid= 2>/dev/null | wc -l || echo "0")
     if [ "${httpd_count:-0}" -gt 0 ] 2>/dev/null; then
         pass "Apache HTTPD actif ($httpd_count processus httpd)"
     else
@@ -68,7 +68,7 @@ stack_verify_extra() {
 
     # Vérifie les données L7 capturées via uprobe httpd
     local l7_count
-    l7_count=$(ch_query "SELECT count() FROM ja4_logs.http_logs_raw WHERE method != ''")
+    l7_count=$(ch_query "SELECT count() FROM ja4_logs.http_logs WHERE method != ''" || echo "0")
     if [ "${l7_count:-0}" -gt 0 ] 2>/dev/null; then
         pass "L7 capturé via uprobe httpd : $l7_count requêtes HTTP"
     else
@@ -78,16 +78,16 @@ stack_verify_extra() {
 
     # Vérifie JA4 fingerprint
     local ja4_sample
-    ja4_sample=$(ch_query "SELECT ja4 FROM ja4_logs.http_logs_raw WHERE ja4 != '' LIMIT 1" 2>/dev/null || echo "")
+    ja4_sample=$(ch_query "SELECT ja4 FROM ja4_logs.http_logs WHERE ja4 != '' LIMIT 1" || echo "")
     if [ -n "$ja4_sample" ]; then
         pass "JA4 fingerprint capturé : $ja4_sample"
     else
         warn "JA4 fingerprint vide — TC ingress hook peut-être non fonctionnel"
     fi
 
-    # Vérifie le SNI capturé
+    # Vérifie le SNI capturé (colonne tls_sni dans http_logs)
     local sni_count
-    sni_count=$(ch_query "SELECT count() FROM ja4_logs.http_logs_raw WHERE sni != ''")
+    sni_count=$(ch_query "SELECT count() FROM ja4_logs.http_logs WHERE tls_sni != ''" || echo "0")
     if [ "${sni_count:-0}" -gt 0 ] 2>/dev/null; then
         pass "SNI capturé dans $sni_count enregistrements"
     else
@@ -96,7 +96,7 @@ stack_verify_extra() {
 
     # Vérifie HTTP port 80 (trafic en clair — kprobe tcp_recvmsg)
     local plain_count
-    plain_count=$(ch_query "SELECT count() FROM ja4_logs.http_logs_raw WHERE correlated = 0 AND method != ''" 2>/dev/null || echo "0")
+    plain_count=$(ch_query "SELECT count() FROM ja4_logs.http_logs WHERE correlated = 0 AND method != ''" || echo "0")
     if [ "${plain_count:-0}" -gt 0 ] 2>/dev/null; then
         pass "HTTP en clair capturé : $plain_count requêtes (kprobe tcp_recvmsg)"
     else