Audit log: what changed, who and when

The Audit log keeps a read-only record of activity across every module, with the field-by-field difference between before and after. Passwords, tokens and tax credentials are always redacted, platform and security logs cannot be switched off, and retention prunes itself.