Keep an audit log of who did what, and how they came in

Written from model events, spatie's role events and panel sign-ins, only for
what a person did, with secrets masked; pruned after a year.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/Feature/Api/AdminApiContractTest.php

@@ -23,6 +23,7 @@ use App\Models\Technology;
 use App\Models\Testimonial;
 use App\Models\User;
 use App\Models\Webhook;
+use App\Support\Audit\Auditor;
 use App\Support\Maintenance;
 use Database\Seeders\RolePermissionSeeder;
 use Illuminate\Foundation\Testing\RefreshDatabase;
@@ -96,6 +97,7 @@ class AdminApiContractTest extends TestCase
             'media' => ['path' => '/v1/media'],
             'tokens' => ['path' => '/v1/tokens'],
             'webhooks' => ['path' => '/v1/webhooks'],
+            'audit' => ['path' => '/v1/audit'],
         ];
     }
 
@@ -120,6 +122,7 @@ class AdminApiContractTest extends TestCase
         $media = Media::factory()->create();
         $page->comment('Primera nota', $this->caller);
         ApiToken::issue($this->caller, 'CI', ['pages.*'], now()->addDay());
+        Auditor::record('pages.updated', $page, ['status' => ['old' => 'draft', 'new' => 'review']], $this->caller);
         $webhook = Webhook::factory()->create(['is_active' => false]);
         $webhook->deliveries()->create(['uuid' => 'contract', 'event' => 'ping', 'payload' => []]);
 
@@ -164,6 +167,7 @@ class AdminApiContractTest extends TestCase
             'revisions' => ["/v1/projects/{$project->id}/revisions", '/v1/projects/{project}/revisions'],
             'tokens' => ['/v1/tokens', '/v1/tokens'],
             'webhooks' => ['/v1/webhooks', '/v1/webhooks'],
+            'audit' => ['/v1/audit', '/v1/audit'],
             'webhook' => ["/v1/webhooks/{$webhook->id}", '/v1/webhooks/{webhook}'],
             'deliveries' => ["/v1/webhooks/{$webhook->id}/deliveries", '/v1/webhooks/{webhook}/deliveries'],
             'review thread' => ["/v1/pages/{$page->id}/reviews", '/v1/pages/{page}/reviews'],