alerting: Use last value instead of average

The average value makes it hard to reason about when an alert will trigger or has triggered when looking at the graph. The averaging done previously could easily be done in graphite if it was required. 

closes #10