Update cloudfoundry rules to match refactoring changes in common

This is based on changes initially discussed in logsearch/logsearch-boshrelease#58 and coordinating with the other three existing PRs.

The test spec files still have a dependency on embedding the `syslog_standard` from common. I think this can/should change later when we have filter rules tag themselves as being applied.