Alert recipients were role-only (User::role('sysadmin')), so alerts silently
went nowhere when a role had no members — which is exactly what happened in
prod: 'sysadmin' has 0 users, so every warning/info alert logged 'no recipients'
and was dropped.

Add extra_recipients config (comma-separated env):
  ALERTING_RECIPIENTS=csirt@ponorogo.go.id,kominfo@ponorogo.go.id
  ALERTING_RECIPIENTS_CRITICAL=kadis@ponorogo.go.id   (per-severity additions)

These are merged with (not replacing) the role-based audience, cover shared
mailboxes and people without an account, and act as a safety net so alerts
still reach someone. The dispatcher now only bails when BOTH sources are empty,
and the warning log points at the fix.