Create incident item from device webhook for triage

Device event payloads arrive without tracked tickets, leaving incidents untriaged and crews uninformed. It creates triage items for on-call engineers so incidents are visible within minutes.