Writing Incident Response Prompts That Actually Speed Up Triage