Quick question on presenting messages to sa-learn for processing - is it sufficient to forward message(s) as attachments to an mbox under /var/spool/mail and running sa-learn --spam or sa-learn --ham on it?
No. You'll have to strip the attachments and feed those to sa-learn.
sa-learn learns the entirety of whatever you feed it. Including message headers.