Audit log

Append-only record of every login, token change, run, approval, PR, deployment and rollback.