fix(attributes): Increase some PII values

[loewenheim]

Description

• There is no good reason thread.id and gen_ai.response.streaming should be excluded from PII.
• http.query, url.query, and url.full should be considered sensitive by default.

PR Checklist

• I have run yarn test and verified that the tests pass.
• I have run yarn generate to generate and format code and docs.

Closes INGEST-918.

[linear-code]

INGEST-918

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

New Features ✨

Attributes

• Add calculated performance scores by loewenheim in #355
• Add rpc.response.status_code attribute by alexander-alderman-webb in #352
• Add rpc.method attribute by alexander-alderman-webb in #351
• Add app vitals start attributes by buenaflor in #353
• Add process.runtime.engine.* attributes by chargome in #347

Bug Fixes 🐛

Attributes

• Increase some PII values by loewenheim in #373

• Change several deprecation statuses to normalize to align with ingestion paths by constantinius in #350

Other

• (create) Replace angle brackets in file names by loewenheim in #356

Internal Changes 🔧

• (gh) Remove myself from CODEOWNERS by lcian in #354
• Bump vulnerable js packages by chargome in #359

---

_{🤖 This preview updates automatically when you update the PR.}

[sentry]

Bug: Updating the PII classification for a canonical attribute like url.full does not propagate the change to its deprecated alias, http.url.
_{Severity: MEDIUM}

Suggested Fix

Modify the attribute update process to ensure that any changes to a canonical attribute's metadata, such as PII classification, are automatically propagated to all of its deprecated aliases. This will maintain data handling consistency.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: model/attributes/url/url__full.json#L3-L9

Potential issue: Updating the PII classification of a canonical attribute does not
propagate the change to its deprecated alias. For instance, the change classifies
`url.full` as PII `true`, but its alias `http.url` remains `maybe`. Similarly,
`gen_ai.response.streaming` is updated to `maybe`, while its alias `ai.streaming`
remains `false`. This inconsistency means the same data is treated differently for PII
depending on the attribute name used, which could lead to incorrect data handling.

_{Did we get this right? 👍 / 👎 to inform future reviews.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8f927b6. Configure here.}