[Rule Tuning] New GitHub Self Hosted Action Runner

[terrancedejesus]

The New GitHub Self Hosted Action Runner needs tuned to account for event.action: enterprise.register_self_hosted_runner being *.register_self_hosted_runner related it to being at different GitHub layers such as enterprise, org or repo level. Missed firing on Shai-Hulud 2.0 simulations.

event.dataset:"github.audit" and
    event.category:"configuration" and
    event.action: (
        "repo.register_self_hosted_runner" or
        "org.register_self_hosted_runner" or
        "enterprise.register_self_hosted_runner"
    )