Create investigation record from frozen team channel message

Flagged channel messages with transaction snippets fragment evidence and delay triage. Create structured investigation records with normalized date, amount, and link so investigators can act same day.