QA specs for modsec blocking mode

There's a QA gap originated in the implementation of issue #8558 (closed).

Acceptance criteria:

• !18964 (closed) is finished and merged.
• There is a test that confirm that the Elastic stack helm chart still works for Defend (see #216536 (closed)).