Move role scopes to a real model for now, refactor the incident notifications, auto send to people with the appropriate role