GeezerVison

Description

Manual backport of #23933 to release-4.11.

Central no longer branches on always-on 4.10+ sensor capabilities:

• SensorDetectionCap — always sync policies and process/network baselines
• PullTelemetryDataCap / PullMetricsCap — always pull diagnostics telemetry and metrics
• HealthMonitoringCap — rely on the cluster health pipeline for active sensors
• NetworkGraphExternalSrcsCap — always push custom external network entities
• AuditLogEventsCap — always sync audit log file state
• SendDeduperStateOnReconnect — always send hash/deduper state; Sensor still honors Central's SendDeduperState preference

SensorACKSupport stays gated.

Scan-config sync on this branch still uses GetCluster, so the connection test expects three GetCluster calls. Master checks existence with Exists. The deduper-state assertion keeps this file's hash copy loop.

This change was partially generated by AI.

User-facing documentation

• CHANGELOG.md is updated OR update is not needed
• documentation PR is created and is linked above OR is not needed

Testing and quality

• the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
• CI results are inspected

Automated testing

Updated Central connection tests that previously mocked missing wave-2 capabilities. Diagnostics tests no longer stub HasCapability for telemetry/metrics pull.

• added unit tests
• added e2e tests
• added regression tests
• added compatibility tests
• modified existing tests

How I validated my change

CI only.