Route suspected password emails to security before SLAs lapse

Your password-reset and verification emails land in a shared inbox, causing credential risk and missed incident triage. Security leads receive flagged alerts and an audit row so incidents are handled before outreach SLAs lapse.