Audit Logs

API-backed operations surface with role-protected actions.