Audit logs

API authentication events, credential rotations, webhook mutations, and export operations will surface here for agency security teams.