Audit log & compliance exports

# Audit log

View who changed what with before/after JSON diffs.

Export for compliance reviews; retention follows platform policy.

Pair with medical retention minimums settings where applicable.