Send dependency PR triage to on-call engineers before review

Your dependency pull requests land untriaged, causing security gaps and delayed fixes across releases. On-call engineers receive triaged issue items with source links so fixes get scheduled before the next security review.