Update account takeover detections documentation

[SomeBadCoding]

Added note about endpoint labels for Account Takeover Detections Ids.

Summary

Added note for cf-login-in web asset labels to have endpoints included in ATO detections

Screenshots (optional)

Documentation checklist

• Is there a changelog entry (guidelines)? If you don't add one for something awesome and new (however small) — how will our customers find out? Changelogs are automatically posted to RSS feeds, the Discord, and X.
• The change adheres to the documentation style guide.
• If a larger change - such as adding a new page- an issue has been opened in relation to any incorrect or out of date information that this PR fixes.
• Files which have changed name or location have been allocated redirects.