SaaS: Detection tuning cuts MTTR


### Problem
Alert fatigue and noisy detections overwhelmed the SOC.

### Solution
Rationalized rules, mapped to risks, introduced triage playbooks, and added coverage KPIs.

### Outcome
- MTTR reduction: {MTTR}%
- False-positive reduction: {FPR}%
- Time to value: {DAYS} days