Audit trail

Tenant-sensitive control-plane actions with actor, target, request, and change summary.