Feature Request: Audit Logs for host and tenant aware #78
Description
Summary
Implement first‑class Audit Logging that works across host (platform) scope and tenant scope, capturing who did what, when, where, and how. The system must be multi‑tenant aware, privacy‑conscious (PII minimization & redaction), and observable (queryable UI + API with filters, export, and retention policies).
Goals:
- Capture immutable audit events for CRUD + auth + configuration actions.
- Support two scopes: Host and Tenant
- Provide APIs and UI for search, filtering, export (CSV/NDJSON)
- Enforce role‑based access (least privilege) with separate host vs tenant permissions.
- Configurable retention with per‑scope overrides and legal hold.