Audit log

Every local event, append-only and hash-chained. Batches are anchored as Merkle roots so an auditor can verify nothing was altered.

No organization topic is configured, so anchors are computed and kept locally only. Run pnpm setup:hedera to publish them.