Audit log

Append-only record of every admin action — reads, writes, and impersonations. Filter to narrow down. Old entries don't disappear.