Admin Audit Log

Immutable security log of all mutating administrative actions (plan overrides, bans, retries).