Add Datadog.configuration.appsec.rasp_enabled

[y9v]

What does this PR do?
It adds DD_APPSEC_RASP_ENABLED setting to AppSec for disabling RASP.

Motivation:
This RFC

Change log entry
Yes. AppSec: Add setting to disable RASP checks

Additional Notes:
None.

How to test the change?
CI is enough

[github-actions]

Thank you for updating Change log entry section 👏

^{Visited at: 2025-01-22 15:41:49 UTC}

[datadog-datadog-prod-us1]

Datadog Report

Branch report: appsec-add-rasp-enabled-config
Commit report: 87c14cd
Test service: dd-trace-rb

✅ 0 Failed, 22086 Passed, 1476 Skipped, 5m 2.71s Total Time

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.73%. Comparing base (97d8583) to head (d4793b5).
Report is 22 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4311      +/-   ##
==========================================
+ Coverage   97.72%   97.73%   +0.01%     
==========================================
  Files        1359     1365       +6     
  Lines       82487    82766     +279     
  Branches     4200     4205       +5     
==========================================
+ Hits        80609    80891     +282     
+ Misses       1878     1875       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-01-22 17:04:34

Comparing candidate commit 87c14cd in PR branch appsec-add-rasp-enabled-config with baseline commit d55c8cb in branch master.

Found 0 performance improvements and 2 performance regressions! Performance is the same for 29 metrics, 2 unstable metrics.

scenario:profiler - Allocations (profiling disabled)

• 🟥 throughput [-439965.288op/s; -432800.143op/s] or [-8.609%; -8.469%]

scenario:profiler - Allocations (profiling enabled)

• 🟥 throughput [-455039.691op/s; -445207.117op/s] or [-8.985%; -8.791%]

[Strech]

Agree to put it inside the instrumentation level until we find a better way to not assemble data if RASP is disabled.

It's tempting to move it into the Context.run_rasp method, but performance wise, it means we will assemble data for WAF without a need and it might be costly

[marcotc]

One question: what is rasp? I can't documentation for it in our source code. If one doesn't exist, can we add a short blurb explaining what is it? (anywhere is fine)