feat(audit): локальный журнал и push в auth-portal

Таблица audit_log, recordAudit на мутациях, GET /api/v1/audit и dual-write source_app=fw.

Co-authored-by: Cursor <[email protected]>

docs/openapi.yaml

@@ -50,6 +50,23 @@ paths:
       responses:
         '200':
           description: Created
+  /api/v1/audit:
+    get:
+      summary: Local audit log (dual-write source fw)
+      security: [{ bearerAuth: [] }]
+      parameters:
+        - name: action
+          in: query
+          schema: { type: string }
+        - name: severity
+          in: query
+          schema: { type: string, enum: [info, warning, critical] }
+        - name: limit
+          in: query
+          schema: { type: integer, default: 200 }
+      responses:
+        '200':
+          description: Audit entries
   /v1/agent/enroll:
     post:
       summary: Enroll agent (public + seed)