fix: resolve warnings in tests and examples

- Remove unused imports (AlertSeverity, AlertType, anyhow::Result, SyscallEvent, SyscallType)
- Prefix unused variables with underscore
- Fix EbpfLoader::default() test (returns value, not Result)
- Fix KernelVersionTooLow fields to use String not integer literals
- Remove unnecessary mut on enricher variables

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: vsilent

examples/usage_examples.rs

@@ -84,7 +84,7 @@ fn example_events() {
     );
 
     // Convert to SecurityEvent
-    let security_event: SecurityEvent = execve_event.into();
+    let _security_event: SecurityEvent = execve_event.into();
     println!("  Converted to SecurityEvent variant");
 
     println!("  ✓ Events created successfully\n");

src/events/validation.rs

@@ -117,7 +117,6 @@ impl EventValidator {
 #[cfg(test)]
 mod tests {
     use super::*;
-    use crate::events::security::{AlertSeverity, AlertType};
     use crate::events::syscall::SyscallType;
     use chrono::Utc;
 

tests/collectors/ebpf_loader_test.rs

@@ -4,7 +4,6 @@
 
 #[cfg(target_os = "linux")]
 mod linux_tests {
-    use anyhow::Result;
     use stackdog::collectors::ebpf::loader::{EbpfLoader, LoadError};
 
     #[test]
@@ -15,8 +14,7 @@ mod linux_tests {
 
     #[test]
     fn test_ebpf_loader_default() {
-        let loader = EbpfLoader::default();
-        assert!(loader.is_ok(), "EbpfLoader::default() should succeed");
+        let _loader = EbpfLoader::default();
     }
 
     #[test]
@@ -45,8 +43,8 @@ mod linux_tests {
         assert!(msg.contains("test_program"));
 
         let error = LoadError::KernelVersionTooLow {
-            required: 4,
-            current: 3,
+            required: "4".to_string(),
+            current: "3".to_string(),
         };
         let msg = format!("{}", error);
         assert!(msg.contains("4.19"));

tests/collectors/ebpf_syscall_test.rs

@@ -5,7 +5,7 @@
 #[cfg(target_os = "linux")]
 mod linux_tests {
     use stackdog::collectors::ebpf::syscall_monitor::SyscallMonitor;
-    use stackdog::events::syscall::{SyscallEvent, SyscallType};
+    use stackdog::events::syscall::SyscallType;
     use std::time::Duration;
 
     #[test]
@@ -55,7 +55,7 @@ mod linux_tests {
         std::thread::sleep(Duration::from_millis(100));
 
         let events = monitor.poll_events();
-        let has_connect = events
+        let _has_connect = events
             .iter()
             .any(|e| e.syscall_type == SyscallType::Connect);
 
@@ -90,7 +90,7 @@ mod linux_tests {
         // Note: Actually calling ptrace requires special setup
         // This test verifies the monitor doesn't crash
 
-        let events = monitor.poll_events();
+        let _events = monitor.poll_events();
         assert!(true); // Just verify no panic
     }
 

tests/collectors/event_enrichment_test.rs

@@ -15,7 +15,7 @@ fn test_event_enricher_creation() {
 
 #[test]
 fn test_enrich_adds_timestamp() {
-    let mut enricher = EventEnricher::new().expect("Failed to create enricher");
+    let enricher = EventEnricher::new().expect("Failed to create enricher");
     let mut event = SyscallEvent::new(1234, 1000, SyscallType::Execve, Utc::now());
 
     enricher.enrich(&mut event).expect("Failed to enrich");
@@ -26,7 +26,7 @@ fn test_enrich_adds_timestamp() {
 
 #[test]
 fn test_enrich_preserves_existing_timestamp() {
-    let mut enricher = EventEnricher::new().expect("Failed to create enricher");
+    let enricher = EventEnricher::new().expect("Failed to create enricher");
     let original_timestamp = Utc::now();
     let mut event = SyscallEvent::new(1234, 1000, SyscallType::Execve, original_timestamp);
 
@@ -104,7 +104,7 @@ fn test_cgroup_parsing() {
 
 #[test]
 fn test_process_tree_enrichment() {
-    let mut enricher = EventEnricher::new().expect("Failed to create enricher");
+    let enricher = EventEnricher::new().expect("Failed to create enricher");
 
     // Test that we can get parent PID
     let ppid = enricher.get_parent_pid(1); // init process
@@ -116,7 +116,7 @@ fn test_process_tree_enrichment() {
 
 #[test]
 fn test_process_comm_enrichment() {
-    let mut enricher = EventEnricher::new().expect("Failed to create enricher");
+    let enricher = EventEnricher::new().expect("Failed to create enricher");
 
     // Test that we can get process name
     let comm = enricher.get_process_comm(std::process::id());
@@ -143,7 +143,7 @@ fn test_timestamp_normalization() {
 
 #[test]
 fn test_enrichment_pipeline() {
-    let mut enricher = EventEnricher::new().expect("Failed to create enricher");
+    let enricher = EventEnricher::new().expect("Failed to create enricher");
     let mut event = SyscallEvent::new(1234, 1000, SyscallType::Execve, Utc::now());
 
     // Run full enrichment pipeline

tests/collectors/ptrace_capture_test.rs

@@ -5,7 +5,6 @@
 #[cfg(target_os = "linux")]
 mod linux_tests {
     use stackdog::collectors::ebpf::syscall_monitor::SyscallMonitor;
-    use stackdog::events::syscall::SyscallType;
     use std::time::Duration;
 
     #[test]