release: version 1.0.9 - Add SNI, ALPN, TLS version extraction and architecture.yml compliance

New features:
- Extract SNI (Server Name Indication) from TLS ClientHello
- Extract ALPN (Application-Layer Protocol Negotiation) protocols
- Detect TLS version from ClientHello using tlsfingerprint library
- Add ConnID field for TCP flow correlation
- Add SensorID field for multi-sensor deployments
- Add SynToCHMs timing field for behavioral detection
- Add AsyncBuffer configuration for output queue sizing

Architecture changes:
- Remove JA4Hash from LogRecord (JA4 format includes its own hash portions)
- Update api.TLSClientHello with new TLS metadata fields
- Update api.LogRecord with correlation, TLS, and timing fields
- Ensure 100% compliance with architecture.yml specification

Tests:
- Add unit tests for TLS extension extraction (SNI, ALPN, Version)
- Update tests for new LogRecord schema without JA4Hash
- Add tests for AsyncBuffer configuration

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

internal/fingerprint/engine.go

@@ -18,6 +18,8 @@ func NewEngine() *EngineImpl {
 }
 
 // FromClientHello generates JA4 (and optionally JA3) fingerprints from a TLS ClientHello
+// Note: JA4Hash is populated for internal use but should NOT be serialized to LogRecord
+// as the JA4 format already includes its own hash portions (per architecture.yml)
 func (e *EngineImpl) FromClientHello(ch api.TLSClientHello) (*api.Fingerprints, error) {
 	if len(ch.Payload) == 0 {
 		return nil, fmt.Errorf("empty ClientHello payload")
@@ -40,11 +42,12 @@ func (e *EngineImpl) FromClientHello(ch api.TLSClientHello) (*api.Fingerprints,
 
 	// Extract JA4 hash portion (last segment after underscore)
 	// JA4 format: <tls_ver><ciphers><extensions>_<sni_hash>_<cipher_extension_hash>
+	// This is kept for internal use but NOT serialized to LogRecord
 	ja4Hash := extractJA4Hash(ja4)
 
 	return &api.Fingerprints{
 		JA4:     ja4,
-		JA4Hash: ja4Hash,
+		JA4Hash: ja4Hash, // Internal use only - not serialized to LogRecord
 		JA3:     ja3,
 		JA3Hash: ja3Hash,
 	}, nil