Create incident notes from flagged emails for on-call

Your incoming security-related emails land untracked, causing delayed triage and missed SLAs. IT and on-call engineers receive consolidated incident notes to speed response before morning standup.