Fix issue #866: Implement the atomic single-PR change: swap ZZ/XX meanings, add the placeholder-swap

[octoaide]

Summary

Implement the atomic single-PR change: swap ZZ/XX meanings, add the placeholder-swap migration and retry-safe checkpointing, allow placeholder filtering, and update docs/tests. Create a draft branch/PR containing code, tests, and docs per the issue plan.

Changed files

• CHANGELOG.md
• Cargo.toml
• README.md
• src/event.rs
• src/event/bootp.rs
• src/event/common.rs
• src/event/conn.rs
• src/event/dcerpc.rs
• src/event/dhcp.rs
• src/event/dns.rs
• src/event/ftp.rs
• src/event/http.rs
• src/event/kerberos.rs
• src/event/ldap.rs
• src/event/malformed_dns.rs
• src/event/mqtt.rs
• src/event/network.rs
• src/event/nfs.rs
• src/event/ntlm.rs
• src/event/radius.rs
• src/event/rdp.rs
• src/event/smb.rs
• src/event/smtp.rs
• src/event/ssh.rs
• src/event/stored_timestamp_contract.rs
• src/event/tls.rs
• src/event/tor.rs
• src/event/unusual_destination_pattern.rs
• src/lib.rs
• src/migration.rs
• src/migration/migration_structures.rs
• src/util.rs

Closes #866

---

This pull request was automatically created by octoaide.

[codecov]

Codecov Report

❌ Patch coverage is 91.10429% with 58 lines in your changes missing coverage. Please review.
✅ Project coverage is 84.74%. Comparing base (8a29d66) to head (eabbd86).

Files with missing lines	Patch %	Lines
src/migration/migration_structures.rs	6.77%	55 Missing ⚠️
src/migration.rs	99.13%	2 Missing ⚠️
src/util.rs	92.85%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #868      +/-   ##
==========================================
+ Coverage   84.58%   84.74%   +0.16%     
==========================================
  Files          92       92              
  Lines       37105    37524     +419     
==========================================
+ Hits        31385    31801     +416     
- Misses       5720     5723       +3     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[sophie-cluml]

Suggested change

	b"migration/0.47.0-alpha.3/country-code-placeholder-swap/checkpoint";
	b"migration/0.47.0/country-code-placeholder-swap/checkpoint";

The migration logic looks sound. My two suggestions make the checkpoint and completion keys stable across the 0.47 prerelease chain. Later alphas extend the same migration, so tying these keys to alpha.3 risks renaming them and reapplying the non-idempotent swap. Please use the final 0.47.0 format namespace before merge.

[sophie-cluml]

Suggested change

	b"migration/0.47.0-alpha.3/country-code-placeholder-swap/completed";
	b"migration/0.47.0/country-code-placeholder-swap/completed";

[octoaide]

Implemented the reviewer’s checkpoint-key feedback in eabbd86.

• Updated the migration checkpoint key to the stable 0.47.0 namespace.
• Updated the completion key to the same namespace.
• This keeps migration state stable across the 0.47 prerelease chain and prevents the non-idempotent swap from being reapplied.