Audit log

Every state-changing API call to the Payments Rail is recorded here with actor (api-key prefix), timestamp, IP, user-agent, and the target id. Auto-refreshes every 5s. Persisted via kvPush(audit.v1) — survives cold starts when KV is wired.