Send daily failed-login alerts to on-call security before SLA

Your failed login attempts accumulate in the auth feed, causing missed lockouts and wider compromise risk. Security gets a prioritized daily summary and urgent alerts so accounts are contained before the next workday.