feat(audit): P3-08 — audit log UI with filters

internal/server/http/server.go

@@ -207,6 +207,9 @@ func (s *Server) routes(r chi.Router) {
 		// Alert list (JSON variant). Same filter shape as the UI page.
 		r.Get("/alerts", s.handleAPIAlerts)
 
+		// Audit log (JSON variant).
+		r.Get("/audit", s.handleAPIAudit)
+
 		// Notification channel test-fire. Dispatches a synthetic payload
 		// through a single named channel; returns JSON result.
 		r.Post("/notifications/{id}/test", s.handleAPINotificationTest)
@@ -317,6 +320,8 @@ func (s *Server) routes(r chi.Router) {
 		r.Get("/alerts", s.handleUIAlerts)
 		r.Post("/alerts/{id}/acknowledge", s.handleUIAlertAcknowledge)
 		r.Post("/alerts/{id}/resolve", s.handleUIAlertResolve)
+		// Audit log (read-only).
+		r.Get("/audit", s.handleUIAudit)
 		// Settings shell + Notifications sub-tab CRUD.
 		r.Get("/settings", s.handleUISettings)
 		r.Get("/settings/notifications", s.handleUINotificationsList)