The scenario catches new workflows in n8n and creates comments in Elastic Security. Runs on its own, no manual copying.