refactor: restructure Logstash notification payload fields

- Use dedicated "version" field for colony version instead of overloading "colony"
- Set "colony" field as boolean flag to indicate notification origin

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: joamag

CHANGELOG.md

@@ -13,7 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-*
+* Restructured Logstash notification payload to use dedicated `version` field and `colony` boolean flag
 
 ### Fixed
 

src/colony/libs/observer_util.py

@@ -394,10 +394,11 @@ def notify_logstash(operation_name, *arguments, **named_arguments):
         "host": socket.gethostname(),
         "hostname": socket.gethostname(),
         "type": "notification",
-        "colony": information.VERSION,
         "name": operation_name,
         "args": arguments_s,
         "kwargs": named_arguments,
+        "version": information.VERSION,
+        "colony": True,
     }
 
     logger.debug(