Create and update catchall ticket records for SOC

Your incoming ticket webhooks arrive untracked, causing delayed SOC handoffs and duplicate work. Create or update standardized ticket records so owners can triage incidents same day.