[FR][DAC] Consideration: expose kql parse parameters for custom rules validation

[brokensound77]

Note: this work will target the DAC-feature branch

related to #3407

---

This is a consideration and not a commitment to work at this point. We should review the feasibility and supportability. If it is doable and not deemed maintainable, we can move the example code to the DAC reference for users to manually implement.

---

Based on #3568, I will look at allowing normalization on KQL queries for custom rules by default. (This allows uppercase operators)

#3407 (comment)