Introduce event.flags

events can go through multiple entities and processing stages. To indicate multiple processing stages in filebeat for log events we introduced log.flags https://github.com/elastic/beats/pull/7991. Some example for these flags are `truncated`, `multiline`. I think this could be more generic on the ECS side that we have `event.flags` so it's possible to add flags that provide additional meta information event.