Send declared detections to on-call engineers before SLAs lapse

Your detection notices sit in a monitoring thread, causing delayed acknowledgements and missed triage. Security leads get immediate alerts so incidents are acknowledged before outreach SLAs lapse.