Updated ECS version from 8.17.0 to 9.0.0

Updated CPS version from 1.0.0 to 1.1.0

Replaced rename() function calls with direct field assignments for improved performance

Fixed email.from.address field mapping to use array:append instead of direct array assignment

Added metadata-source.yaml file for package metadata

Initial release with comprehensive ePHI event parsing

Support for file inspection, deletion, and copying events

Device attachment monitoring capabilities

Clipboard activity tracking

Email event processing

Process and file I/O activity monitoring