Log user activity part 2

[chrismatix]

Motivation:
A basic requirement for security compliance for many companies is the ability to audit user activities on a system.

GIVEN authentication is turned on for Airy Core
WHEN a user makes a request with a system token or via OIDC authentication
THEN the user information gets logged alongside the request

For this, we could add the Kafka appender with ops.application.logs back into RequestsLoggingFilter and attach either

• the last n symbols of the system token used
• or the OIDC profile
  Both should be provided by the security context.