Keep an audit log of who did what, and how they came in

Written from model events, spatie's role events and panel sign-ins, only for
what a person did, with secrets masked; pruned after a year.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/Support/Permissions.php

@@ -77,6 +77,9 @@ final class Permissions
         // data off this server, so it is an administrator's decision.
         'webhooks' => ['view_any', 'view', 'create', 'update', 'delete'],
 
+        // Who did what, from where. It names people and their addresses.
+        'audit' => ['view_any'],
+
         'users' => ['view_any', 'view', 'create', 'update', 'delete'],
         'roles' => ['view_any', 'view', 'create', 'update', 'delete'],