adding optional incident_id and more tests for config assertions

Looking at how the logs come through in SQS I'm pretty sure an incident_id will be really useful to triaging messages without full parse. Also adding tests.