Forward pentest create notification fields

[tofikwest]

Summary

• forward webhookUrl and notificationEmail in penetration test create requests
• preserve those fields in the optimistic report cache after create
• add regression coverage for the create request body

Verification

• cd apps/app && bunx vitest run 'src/app/(app)/[orgId]/security/penetration-tests/hooks/use-penetration-tests.test.tsx'

Context: this addresses the production PR review finding identified by cubic.

---

Summary by cubic

Fix penetration test creation to include webhookUrl and notificationEmail, and keep them in the optimistic cache so notifications work and the UI reflects these fields immediately. Adds regression coverage to ensure these fields are posted.

• Bug Fixes
  • Send webhookUrl and notificationEmail in the create request body.
  • Preserve these fields in the optimistic report cache after create.

^{Written for commit 96325ab. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app	Ready	Preview, Comment	May 2, 2026 1:06am
comp-framework-editor	Ready	Preview, Comment	May 2, 2026 1:06am

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
portal	Skipped		May 2, 2026 1:06am

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.