Email Security: state how D&R-driven actions are attributed

[maximelb]

The page claimed actions dispatched from a D&R rule carry source: dr. That is true for dr-mail rules only. For dr-general rules the audit reason names the rule and actor/source are the extension's key. Also documents that a person's extension request needs mailsec.act, that campaign actions are person-only, and that plain-string reason values in a rule are dropped.

🤖 Generated with Claude Code

[limacharlie-refractionpoint]

LimaCharlie Cloud Security — code scan

No new code findings were introduced by this pull request.

This check reports and never fails: no gating.fail_on is set on the code_scanning policy.

Scanned refractionPOINT/documentation c22c6a4…a30dc76 — only findings new in the head commit are listed; anything already on the base branch is the repository's own finding set, on the Cloud Security Code page.

This comment is updated in place on every push to this pull request.