change action.key.values to object in alerts

custom_schemas/custom_responses.yml

@@ -78,7 +78,7 @@
 
     - name: action.key.values
       level: custom
-      type: nested
+      type: object
       description: Values modified
 
     - name: action.key.values.name

package/endpoint/data_stream/alerts/fields/fields.yml

@@ -419,7 +419,7 @@
       default_field: false
     - name: action.key.values
       level: custom
-      type: nested
+      type: object
       description: Values modified
       default_field: false
     - name: action.key.values.actions

package/endpoint/docs/README.md

@@ -80,7 +80,7 @@ sent by the endpoint.
 | Responses.action.file.reason | Combined USN file modification reason | long |
 | Responses.action.key.actions | Actions taken by Registry Rollback for key | keyword |
 | Responses.action.key.path | NT path of registry key recovered by Rollback | keyword |
-| Responses.action.key.values | Values modified | nested |
+| Responses.action.key.values | Values modified | object |
 | Responses.action.key.values.actions | Actions taken by Registry Rollback for value | keyword |
 | Responses.action.key.values.name | Value name recovered by Rollback | keyword |
 | Responses.action.source.attributes | Source file attributes | keyword |