libbpf-tools with tracepoint/syscalls progs use wrong parameter structs

After running one of the more recent latest CentOS 9 Stream kernels, I found the offsets to be slightly off.

For example: execsnoop would end up gathering the environment variables instead of exec arguments.

The structs that should be used instead are `struct syscall_trace_enter` and `struct syscall_trace_exit`. The structs for the `syscalls` event tracepoints may not always be aligned with the `raw_syscalls` tracepoint structs, especially on kernels with a subset of RT patches applied.

Start by locating the libbpf-tools programs using tracepoint/syscalls structs, including execsnoop, and compare their parameter definitions with the mentioned syscall_trace_enter and syscall_trace_exit structs. Reproduce the offset problem on a recent CentOS 9 Stream kernel, then verify that execsnoop reports exec arguments rather than environment variables.

Written by the indexing model from the issue text.