Create or comment tracked issue from security emails

Your security announcement emails arrive untracked, leaving engineers without a formal ticket for triage and follow-up. Create or update tracked issues so incidents are assigned and visible same day.