Admin audit

The privileged-action trail: every change made with the super admin token and every rejected admin authentication. Newest first. Request bodies — and so secrets — are never recorded.