Egress audit

Every outbound mutation logged with destination, content hash, and decision (D10.5).

Coming soon

Audit events are not yet being written anywhere.

Unblocked by: Stage 9 (audit writer)