Create or update triage tickets from helpdesk webhooks

Your help desk SOC2 removal requests are unstructured and miss reporter context. You get populated triage tickets with reporter details and links, enabling same-day removal.