refactor(audit): extract audit domain into self-contained module

Move the entire audit subsystem (system audit, API audit, import audit,
user lifecycle audit, frontend telemetry) from core into modules/audit/.

Core decoupling via interface-based injection:
- AuditRecorderInterface replaces SystemAuditService in 10+ core services
- UserLifecycleAuditInterface / ImportAuditInterface for specialized flows
- NullAuditRecorder fallback when audit module is disabled
- ApiBootstrap/ApiResponse use null-safe callable resolvers

Module structure (modules/audit/):
- Manifest with routes, permissions, scheduler jobs, authorization policy
- 9 services, 8 repositories, 6 domain enums, 4 job handlers
- 33 page files, 4 JS files, 8 test files, migration scripts, i18n

Core cleanup:
- OperationsAuthorizationPolicy, UiCapabilityMap, PermissionService
  surgically cleaned of audit-specific constants
- Sidebar template cleared of hardcoded audit navigation
- AuditModuleIsolationContractTest ensures no future core→module coupling

All quality gates pass: 1346 tests (19,276 assertions), PHPStan level 5
clean, architecture contracts verified.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

modules/audit/db/updates/2026-03-25-audit-tables.sql

@@ -0,0 +1,97 @@
+-- Audit module: idempotent migration for existing audit tables.
+-- These tables may already exist in deployments that had audit in core.
+-- All statements use IF NOT EXISTS to be safe for both fresh installs and upgrades.
+
+CREATE TABLE IF NOT EXISTS `system_audit_log` (
+  `id` BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `event_uuid` CHAR(36) NOT NULL,
+  `request_id` CHAR(36) NULL,
+  `channel` VARCHAR(20) NOT NULL DEFAULT 'web',
+  `event_type` VARCHAR(64) NOT NULL,
+  `outcome` VARCHAR(20) NOT NULL DEFAULT 'success',
+  `error_code` VARCHAR(100) NULL,
+  `actor_user_id` INT UNSIGNED NULL,
+  `actor_tenant_id` INT UNSIGNED NULL,
+  `target_type` VARCHAR(64) NULL,
+  `target_id` INT UNSIGNED NULL,
+  `target_uuid` CHAR(36) NULL,
+  `method` VARCHAR(8) NULL,
+  `path` VARCHAR(255) NULL,
+  `ip_hash` CHAR(64) NULL,
+  `user_agent_hash` CHAR(64) NULL,
+  `metadata_json` JSON NULL,
+  `created` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  KEY `idx_sal_event_type_created` (`event_type`, `created` DESC),
+  KEY `idx_sal_actor_user_id` (`actor_user_id`),
+  KEY `idx_sal_created` (`created` DESC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+CREATE TABLE IF NOT EXISTS `api_audit_log` (
+  `id` BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `request_id` CHAR(36) NOT NULL,
+  `method` VARCHAR(8) NOT NULL,
+  `path` VARCHAR(255) NOT NULL,
+  `query_json` JSON NULL,
+  `status_code` SMALLINT UNSIGNED NOT NULL,
+  `duration_ms` INT UNSIGNED NULL,
+  `error_code` VARCHAR(100) NULL,
+  `user_id` INT UNSIGNED NULL,
+  `tenant_id` INT UNSIGNED NULL,
+  `api_token_id` INT UNSIGNED NULL,
+  `token_tenant_id` INT UNSIGNED NULL,
+  `ip` VARCHAR(45) NULL,
+  `user_agent` VARCHAR(255) NULL,
+  `created` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  KEY `idx_aal_created` (`created` DESC),
+  KEY `idx_aal_path_created` (`path`(64), `created` DESC),
+  KEY `idx_aal_user_id` (`user_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+CREATE TABLE IF NOT EXISTS `import_audit_runs` (
+  `id` BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `run_uuid` CHAR(36) NOT NULL,
+  `profile_key` VARCHAR(64) NOT NULL,
+  `status` VARCHAR(20) NOT NULL DEFAULT 'running',
+  `source_filename` VARCHAR(255) NULL,
+  `mapped_targets_csv` VARCHAR(500) NULL,
+  `rows_total` INT UNSIGNED NOT NULL DEFAULT 0,
+  `created_count` INT UNSIGNED NOT NULL DEFAULT 0,
+  `skipped_count` INT UNSIGNED NOT NULL DEFAULT 0,
+  `failed_count` INT UNSIGNED NOT NULL DEFAULT 0,
+  `error_codes_json` JSON NULL,
+  `duration_ms` INT UNSIGNED NULL,
+  `user_id` INT UNSIGNED NULL,
+  `current_tenant_id` INT UNSIGNED NULL,
+  `created` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `finished_at` DATETIME NULL,
+  PRIMARY KEY (`id`),
+  KEY `idx_iar_created` (`created` DESC),
+  KEY `idx_iar_profile_key` (`profile_key`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+CREATE TABLE IF NOT EXISTS `user_lifecycle_audit_log` (
+  `id` BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `run_uuid` CHAR(36) NOT NULL,
+  `action` VARCHAR(20) NOT NULL,
+  `trigger_type` VARCHAR(20) NOT NULL,
+  `status` VARCHAR(20) NOT NULL DEFAULT 'success',
+  `reason_code` VARCHAR(100) NULL,
+  `policy_deactivate_days` INT UNSIGNED NOT NULL DEFAULT 0,
+  `policy_delete_days` INT UNSIGNED NOT NULL DEFAULT 0,
+  `actor_user_id` INT UNSIGNED NULL,
+  `target_user_id` INT UNSIGNED NULL,
+  `target_user_uuid` CHAR(36) NULL,
+  `target_user_email` VARCHAR(255) NULL,
+  `snapshot_enc` MEDIUMTEXT NULL,
+  `snapshot_version` TINYINT UNSIGNED NOT NULL DEFAULT 1,
+  `restored_at` DATETIME NULL,
+  `restored_by_user_id` INT UNSIGNED NULL,
+  `restored_user_id` INT UNSIGNED NULL,
+  `created` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  PRIMARY KEY (`id`),
+  KEY `idx_ulal_action_created` (`action`, `created` DESC),
+  KEY `idx_ulal_target_user_id` (`target_user_id`),
+  KEY `idx_ulal_created` (`created` DESC)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;