[LogsDB] [Stack 8.19.19-SNAPSHOT] [forcepoint_web] Failing test daily: system test: logfile in forcepoint_web.logs

- Stack version: 8.19.19-SNAPSHOT
- LogsDB: enabled
- Package: forcepoint_web
- Failing test: system test: logfile
- DataStream: logs
- Owners:
- @elastic/integration-experience

Error:
```
could not add data stream config to policy: could not create package policy (req {"name":"forcepoint_web-logs-10128","description":"","namespace":"10128","policy_id":"7e9704b8-c745-40f4-bac2-6a2231ced047","package":{"name":"forcepoint_web","version":"1.13.0"},"inputs":{"logs-logfile":{"enabled":true,"streams":{"forcepoint_web.logs":{"enabled":true,"vars":{"paths":["/tmp/service_logs/forcepoint-web-*.log"]}}}}},"force":false}); API status code = 400; response body = {"statusCode":400,"error":"Bad Request","message":"Unexpected scalar at node end at line 3, column 26:\n\nexclude_lines: ['^\"Date']exclude_files: ['\\.gz$']tags: - forwardedpublisher_pi…\n ^^^^^^^^^^^^^\n"}
```

First build failed: https://buildkite.com/elastic/integrations/builds/46082

Latest 5 failed builds:
- https://buildkite.com/elastic/integrations/builds/46709
- https://buildkite.com/elastic/integrations/builds/46802
- https://buildkite.com/elastic/integrations/builds/46860
- https://buildkite.com/elastic/integrations/builds/46919
- https://buildkite.com/elastic/integrations/builds/47004

Start with the forcepoint_web package's system test: logfile and the failing Buildkite runs; inspect how the logs-logfile input renders the package policy around exclude_lines and exclude_files. Done means the test can create the package policy and the forcepoint_web logfile system test passes.

Written by the indexing model from the issue text.