[Security AI Prompts] Update Entity Highlights prompt for empty-signal guardrails

[tcalopes]

Update the entityDetailsHighlights prompt content to more strongly instruct the model to omit empty-signal filler / recommendations.

Proposed commit message

Update the entityDetailsHighlights Security AI prompt (aiForEntityDetails group) used by the Entity Analytics "Entity summary" flyout in the Security Solution.

WHAT:

• Rewrites the prompt so highlights are only included when that signal is present and non-empty; recommended actions are omitted when there is nothing concrete to recommend; and filler such as "no anomalies detected" is discouraged.
• Content-only change to the single entityDetailsHighlights saved object; the saved-object id, type, and filename are unchanged.
• Bumps the package version 1.0.13 → 1.0.14 (patch, content-only) with a matching changelog.yml entry.

WHY:

• Mirrors the corresponding Kibana prompt change in [Entity Analytics] AI summary contradictory content kibana#279617

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• Confirm the version bump + changelog entry are consistent.
• Coordinate with [Security AI Prompts] Update Entity Highlights prompt #19999 so only one 1.0.14 lands.

How to test this PR locally

1. Build and serve the package (requires Docker running):

   cd packages/security_ai_prompts
   elastic-package lint
   elastic-package build
   elastic-package stack up -d -v --services package-registry

[github-actions]

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

---

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

[elastic-vault-github-plugin-prod]

✅ All changelog entries have the correct PR link.

[infra-vault-gh-plugin-prod]

💚 Build Succeeded

• Buildkite Build
• Commit: a25e0cf

[CAWilson94]

@tcalopes please feel free to close #19999 if no longer relevant

[tcalopes]

@tcalopes please feel free to close #19999 if no longer relevant

@CAWilson94 unfortunately I don't think I have permission to do that

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[CAWilson94]

@tcalopes all good, closed it off. Thanks for getting this over the line 🔥