Audit

Structured audit events covering authentication, token lifecycle, tool execution, and policy decisions.

Audit log viewer is not yet wired.

Listing implementation arrives in a later slice.