Send validated pentest webhook alerts to ops channel

Pentest webhook payloads arrive as raw, unverified JSON, leaving engineers without trusted context for triage. Validated, human-readable alerts let on-call engineers triage verified findings faster, before follow-up windows close.