Create incident record and alert security from form

Phishing reports arrive by form but aren't logged centrally, leaving SOC analysts without searchable incident records. Capture each report into a central log and notify security leads so incidents are triaged within the hour.