docs: add and update threat_insight_settings documentation

- Update resource doc: rename network_excludes to exclude_zones, add created/last_updated read-only attrs, fix example
- Add missing data source doc for okta_threat_insight_settings

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: pranav-okta

docs/data-sources/threat_insight_settings.md

@@ -0,0 +1,37 @@
+---
+page_title: "Data Source: okta_threat_insight_settings"
+description: |-
+  Retrieves Okta ThreatInsight Settings.
+---
+
+# Data Source: okta_threat_insight_settings
+
+Retrieves Okta ThreatInsight Settings.
+
+## Example Usage
+
+```terraform
+data "okta_threat_insight_settings" "example" {}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- `id` (String) Unique identifier of the threat_insight_settings.
+
+### Read-Only
+
+- `items` (List of Object) List of ThreatInsight settings. (see [below for nested schema](#nestedatt--items))
+
+<a id="nestedatt--items"></a>
+### Nested Schema for `items`
+
+Read-Only:
+
+- `action` (String) Specifies how Okta responds to authentication requests from suspicious IPs.
+- `created` (String) Timestamp when the ThreatInsight Configuration object was created.
+- `exclude_zones` (List of String) List of Network Zone IDs excluded from ThreatInsight evaluation.
+- `id` (String) The unique identifier for the item.
+- `last_updated` (String) Timestamp when the ThreatInsight Configuration object was last updated.

docs/resources/threat_insight_settings.md

@@ -19,8 +19,8 @@ resource "okta_network_zone" "ip_network_zone_example" {
 }
 
 resource "okta_threat_insight_settings" "example" {
-  action           = "block"
-  network_excludes = [okta_network_zone.ip_network_zone_example.id]
+  action        = "block"
+  exclude_zones = [okta_network_zone.ip_network_zone_example.id]
 }
 ```
 
@@ -33,11 +33,13 @@ resource "okta_threat_insight_settings" "example" {
 
 ### Optional
 
-- `network_excludes` (List of String) Accepts a list of Network Zone IDs. Can only accept zones of `IP` type. IPs in the excluded Network Zones aren't logged or blocked by Okta ThreatInsight and proceed to Sign On rules evaluation. This ensures that traffic from known, trusted IPs isn't accidentally logged or blocked. The ordering of the network zone is not guarantee from the API sides
+- `exclude_zones` (List of String) Accepts a list of Network Zone IDs. Can only accept zones of `IP` type. IPs in the excluded Network Zones aren't logged or blocked by Okta ThreatInsight and proceed to Sign On rules evaluation. This ensures that traffic from known, trusted IPs isn't accidentally logged or blocked. The ordering of the network zone is not guaranteed from the API side.
 
 ### Read-Only
 
-- `id` (String) The ID of this resource.
+- `created` (String) Timestamp when the ThreatInsight Configuration object was created.
+- `id` (String) The unique identifier for the resource.
+- `last_updated` (String) Timestamp when the ThreatInsight Configuration object was last updated.
 
 ## Import