This is the second PR for moving connection events out of the audit log.

This PR:

• Adds the/api/v2/connectionlog endpoint
• Adds filtering forGetAuthorizedConnectionLogsOffset and thus the endpoint.
  There's quite a few, but I was aiming for feature parity with the audit log.
  1. organization:<id|name>
  2. workspace_owner:<username>
  3. workspace_owner_email:<email>
  4. type:<ssh|vscode|jetbrains|reconnecting_pty|workspace_app|port_forwarding>
  5. username:<username>
     • Only includes web-based connection events (workspace apps, web port forwarding) as only those include user metadata.
  6. user_email:<email>
  7. connected_after:<time>
  8. connected_before:<time>
  9. workspace_id:<id>
  10. connection_id:<id>
      • If you have one snapshot of the connection log, and some sessions are ongoing in that snapshot, you could use this filter to check if they've been closed since.
  11. status:<connected|disconnected>
      • Ifconnected only sessions with a nullclose_time are returned, ifdisconnected, only those with a non-nullclose_time. If filter is omitted, both are returned.

Future PRs:

• Populatecount onConnectionLogResponse using a seperate query (to preemptively mitigate the issue described inAudit log slows to a crawl when nearing 1 million entries #17689)
• Implement a table in the Web UI for viewing connection logs.
• Write a query to delete old events from the audit log, call it from dbpurge.
• Write documentation for the endpoint / feature (including these filters)