Number of 4XX responses from Provider API greater than N in Y duration

come up with an alert query that will allow a user to specify that if the number of 4xx increases more than N in Y duration an alert will fire.

Recreate by e.g. bad auth, or bad geo code.

This will need to be tested that it does fire when expected.

Also some details on potential causes, and how to investigate and troubleshoot.

Start by locating the Provider API metrics and existing alert queries in the repository. Reproduce 4XX responses with bad authentication or a bad geocode, then verify that an alert fires when the configurable threshold N is exceeded during duration Y. Document potential causes and investigation steps alongside the tested alert.

Written by the indexing model from the issue text.