[o365] add agent replacement script test

[kcreddy]

Proposed commit message

[o365] add agent replacement script test

Verify that destroying and re-enrolling the agent does not lose
events. The new agent has no cursor state and re-collects from
initial_interval; fingerprint dedup on o365audit.Id prevents
duplicates. New blobs that appeared during the outage are picked up.

Note

Test only - no changelog needed.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

New script test runs successfully.

PASS
--- Test results for package: o365 - START ---
╭─────────┬─────────────┬───────────┬────────────────────────┬────────┬────────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME              │ RESULT │   TIME ELAPSED │
├─────────┼─────────────┼───────────┼────────────────────────┼────────┼────────────────┤
│ o365    │ audit       │ script    │ env                    │ PASS   │     85.57775ms │
│ o365    │ audit       │ script    │ mid_collection_restart │ PASS   │ 2m1.761670292s │
╰─────────┴─────────────┴───────────┴────────────────────────┴────────┴────────────────╯
--- Test results for package: o365 - END   ---
Done

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 1dbc3ba