Add new security review pages to risk tracker before audits

Your internal review pages sit untracked, causing compliance gaps and missed remediation. Security managers get prioritized state records for new reviews so remediation is scheduled before the next audit.