Save banned-user report CSVs for security analysts before review

Your security alert emails arrive with CSV attachments, causing delayed account reviews and compliance gaps. Analysts get parsed files saved and flagged for review before the next workday.