Send blocked-site alerts to security engineers before shift end

Your blocked page events arrive untriaged, causing missed threat cues and slower containment. Security engineers receive concise incident emails so containment happens before the next shift.