41aa6723c5
cortex-xdr-update-incident declares the API's nine status values and the four severities, so the playbook editor offers them in a drop-down and the command bar refuses a misspelt one. resolved_other joins the list; resolved_auto leaves it, Cortex XDR setting it itself. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WhDQSYZd1mFtRsXK4ixtyB