Fix patch bug. Improve enums.

[rmouritzen-splunk]

• Fix patch bug where attribute descriptions were incorrectly copied back to the dictionary.
• Drop enum sibling validation issues from error to warning.
• Improve UI of enum attributes and enum sibling attributes.

[mikeradka]

Nice work, @rmouritzen-splunk. I may want to pick your brain on how you untangled the patch bug that we discovered through ocsf/splunk#40 for my own curiosity.

It appears to be patching the descriptions correctly for extensions with this fix:

Schema.dictionary()[:attributes][:"splunk/display_name"]

iex(10)> Schema.dictionary()[:attributes][:"splunk/display_name"]
%{
  type: "string_t",
  description: "The display name. See specific usage.",
  extension: "splunk",
  requirement: "optional",
  _links: [
    %{
      type: "user",
      group: :object,
      caption: "User",
      attribute_keys: MapSet.new([:display_name])
    }
  ],
  caption: "Display Name",
  type_name: "String",
  _source: :"splunk/user",
  extension_id: 1,
  _source_patched: :user
}

Schema.object(:user)[:attributes][:display_name]

iex(11)> Schema.object(:user)[:attributes][:display_name]
%{
  type: "string_t",
  description: "The display name of the user, as reported by the product.",
  extension: "splunk",
  requirement: "optional",
  _links: [
    %{
      type: "user",
      group: :object,
      caption: "User",
      attribute_keys: MapSet.new([:display_name])
    }
  ],
  caption: "Display Name",
  type_name: "String",
  _source: :"splunk/user",
  extension_id: 1,
  _source_patched: :user
}

---

Also the link in the string enum sibling can be helpful for OCSF adopters: