P0: Audit log writer (from day one)

Imported from GitHub issue El-SaMa/oma#13 by @El-SaMa.

Implement an audit helper that records actor (user/admin/system/agent), action, target, before/after.

Done when: every sample mutation writes an audit row.