Update and close EDR incident tickets for technicians

Datto EDR alerts create tickets without host context, leaving technicians guessing. It summarizes the detection, adds an analyst note, and closes quarantined tickets so techs can act same day.