[fix] Make Google drive rules app name specific

[alessandrarizzo]

Background

Changes

Testing

[cursor]

PR Summary

Low Risk
Small, targeted filter change to rule matching plus test updates; main risk is unintentionally missing events if some Drive logs lack id.applicationName.

Overview
Tightens two Google Workspace ActivityEvent detections to only trigger when id.applicationName is drive, preventing false positives from similarly named actions in other Google apps.

Updates the associated rule tests to include the Drive applicationName field on positive/negative cases and adds explicit negative test coverage for Gmail events.

^{Reviewed by Cursor Bugbot for commit f3026b0. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 2c4c685. Configure here.}