feat(enterprise): audit key control-plane actions

[Gracker]

Summary

• add request-context enterprise audit recording helper with minimal graph bootstrapping for audit FK integrity
• record audit_events for trace upload/read/delete, report read/export/delete, provider lifecycle/secret/runtime/test actions, and memory promote/delete
• cover the new audit actions in route tests and mark enterprise multi-tenant README §0.5.2 complete

Verification

• cd backend && PATH="/Users/chris/.nvm/versions/node/v24.15.0/bin:/Users/chris/.codex/tmp/arg0/codex-arg0Ggjp4H:/Users/chris/.nvm/versions/node/v20.19.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/path:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.config/kaku/zsh/bin:/Users/chris/.opencode/bin:/Users/chris/.bun/bin:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.nvm/versions/node/v20.19.0/bin:/opt/homebrew/share/google-cloud-sdk/bin:/Users/chris/.local/bin:/Users/chris/.local/bin:/Users/chris/.codeium/windsurf/bin:/Library/Frameworks/Python.framework/Versions/3.12/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pkg/env/active/bin:/opt/pmk/env/global/bin:/Library/Apple/usr/bin:/usr/local/go/bin:/Users/chris/.cargo/bin:/Users/chris/tools/Android-sdk/platform-tools/:/Users/chris/tools/TTDeDroid/bin:/Users/chris/tools/depot_tools:/Users/chris/tools/flutter/flutter/bin:/Applications/Warp.app/Contents/Resources/bin" npx jest --runInBand --forceExit src/routes/tests/enterpriseTraceMetadataRoutes.test.ts src/routes/tests/enterpriseReportRoutes.test.ts src/routes/tests/memoryRoutes.test.ts src/services/providerManager/tests/providerRoutes.test.ts src/services/tests/enterpriseSchema.test.ts src/routes/tests/enterpriseApiKeyRoutes.test.ts src/routes/tests/enterpriseAuthRoutes.test.ts src/services/providerManager/tests/enterpriseProviderStore.test.ts
• cd backend && PATH="/Users/chris/.nvm/versions/node/v24.15.0/bin:/Users/chris/.codex/tmp/arg0/codex-arg0Ggjp4H:/Users/chris/.nvm/versions/node/v20.19.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/path:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.config/kaku/zsh/bin:/Users/chris/.opencode/bin:/Users/chris/.bun/bin:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.nvm/versions/node/v20.19.0/bin:/opt/homebrew/share/google-cloud-sdk/bin:/Users/chris/.local/bin:/Users/chris/.local/bin:/Users/chris/.codeium/windsurf/bin:/Library/Frameworks/Python.framework/Versions/3.12/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pkg/env/active/bin:/opt/pmk/env/global/bin:/Library/Apple/usr/bin:/usr/local/go/bin:/Users/chris/.cargo/bin:/Users/chris/tools/Android-sdk/platform-tools/:/Users/chris/tools/TTDeDroid/bin:/Users/chris/tools/depot_tools:/Users/chris/tools/flutter/flutter/bin:/Applications/Warp.app/Contents/Resources/bin" npm run typecheck
• git diff --check
• cd backend && PATH="/Users/chris/.nvm/versions/node/v24.15.0/bin:/Users/chris/.codex/tmp/arg0/codex-arg0Ggjp4H:/Users/chris/.nvm/versions/node/v20.19.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/path:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.config/kaku/zsh/bin:/Users/chris/.opencode/bin:/Users/chris/.bun/bin:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.nvm/versions/node/v20.19.0/bin:/opt/homebrew/share/google-cloud-sdk/bin:/Users/chris/.local/bin:/Users/chris/.local/bin:/Users/chris/.codeium/windsurf/bin:/Library/Frameworks/Python.framework/Versions/3.12/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pkg/env/active/bin:/opt/pmk/env/global/bin:/Library/Apple/usr/bin:/usr/local/go/bin:/Users/chris/.cargo/bin:/Users/chris/tools/Android-sdk/platform-tools/:/Users/chris/tools/TTDeDroid/bin:/Users/chris/tools/depot_tools:/Users/chris/tools/flutter/flutter/bin:/Applications/Warp.app/Contents/Resources/bin" npm run test:scene-trace-regression
• PATH="/Users/chris/.nvm/versions/node/v24.15.0/bin:/Users/chris/.codex/tmp/arg0/codex-arg0Ggjp4H:/Users/chris/.nvm/versions/node/v20.19.0/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/path:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.config/kaku/zsh/bin:/Users/chris/.opencode/bin:/Users/chris/.bun/bin:/Users/chris/.antigravity/antigravity/bin:/Users/chris/.nvm/versions/node/v20.19.0/bin:/opt/homebrew/share/google-cloud-sdk/bin:/Users/chris/.local/bin:/Users/chris/.local/bin:/Users/chris/.codeium/windsurf/bin:/Library/Frameworks/Python.framework/Versions/3.12/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pkg/env/active/bin:/opt/pmk/env/global/bin:/Library/Apple/usr/bin:/usr/local/go/bin:/Users/chris/.cargo/bin:/Users/chris/tools/Android-sdk/platform-tools/:/Users/chris/tools/TTDeDroid/bin:/Users/chris/tools/depot_tools:/Users/chris/tools/flutter/flutter/bin:/Applications/Warp.app/Contents/Resources/bin" npm run verify:pr

[Gracker]

已通过 commit 67856ec (merge) + 023a84a (frontend rebuild) 合入 main，关闭此 PR。