Create incident records from device alerts for on-call

Your device alerts land as raw webhooks, causing missed incidents and delayed remediation. Prioritize alerts and produce audit-ready incident rows so teams act before the next workday.