Send default branch change alerts to security engineers before deploys

Your repo default-branch changes occur without visibility, causing missed CI runs. Security and release leads get concise alerts with change context to review before the next deployment window.