Open incident

Capture human-reported issues and fixes without an Alertmanager webhook. Optional SRE investigation uses the same engines as alert-driven work.