Create driver incident tickets for operations supervisors before SLAs lapse

Your driver alert webhooks about app misuse arrive untriaged, causing delayed incident filing and missed recovery actions. Supervisors get standardized incident tickets and an audit row so billing and follow-ups finish before the next billing run.