Audit log.

Every mutation through the API lands here, keyed by entity. The ledger is append-only and tenant-scoped; events trickle in through the same bus that connectors subscribe to.