[siem] Implement read-only execution constraints

[mrsumanbiswas]

Enforce strict GET / _search operations across all SIEM driver calls