missed evaluation in raw SQL alerts compare multi-window results to a single window threshold #3578

What happened?

After a missed alert evaluation the next run's date range is extended back to the last evaluated window. Builder and time-series alerts split that range into one bucket per interval and compare each bucket to the threshold. Raw SQL Number tile alerts run their SQL once over the whole extended range and compare that one result to the threshold, which is meant for a single window.

Say you have 2 errors per window and your threshold is 3, a missed evaluation will result in an alert in the next eval even though the threshold was never actually breached

Steps to reproduce

Reproduces on play.hyperdx.io?
Reproduced on a test case in this PR: #3577

How are you running HyperDX?

Where does it show up?

Debug info

(paste Help → Copy debug info here)

Logs