Send user analysis requests to fraud investigators before shifts

Your reaction-marked alert messages arrive in team chat, causing delayed fraud reviews and missed containment windows. Investigators get parsed customer IDs and a direct analysis link, enabling case starts before the next shift.