#28 API-7: Audit REST API & Event Logging

Implement /v1/audit read endpoint. Trigger audit events for decision lifecycle, actions, delegations, webhooks, and Action Web. Retain for 365 days. Block user modification. (UB-AUD-1, UB-AUD-2, UB-AUD-3, UN-AUD-1)