feat(logs): read-only site + server logs

[fbarrento]

Parent

#32

What to build

Read-only log access so an IaC tool can surface failures: site logs (application / nginx-access / nginx-error) and server logs (/logs/{key}).

Acceptance criteria

• Resource methods returning raw log content (string) for site app/nginx-access/nginx-error and server /logs/{key}
• Requests: GET /sites/{site}/logs/application|nginx-access|nginx-error, GET /logs/{key}
• Log content redacted in fixtures
• Live-recorded fixtures; 100% coverage

Blocked by

None - can start immediately