Build Audit Log Module for Admin Actions

[Mkalbani]

Description

Implement a comprehensive audit logging module that records every admin action taken through the API. For a game with on-chain rewards and community-submitted content, audit trails are non-negotiable. Admins must be accountable for bans, reward adjustments, puzzle approvals, and NFT operations, with a queryable log that persists the who, what, when, and context of every action.

Acceptance Criteria

• An audit module is scaffolded at src/audit/
• AuditLog entity stores actorId, action, targetEntity, targetId, payload (JSON), and timestamp
• Logs are written automatically via an interceptor applied to all admin routes
• GET /admin/audit returns paginated audit logs with filters for actor, action type, and date range
• Sensitive fields (passwords, tokens) are scrubbed from logged payloads before storage
• Audit logs are immutable — no update or delete endpoints exist for log records
• Log writes are non-blocking and do not affect the response time of the triggering action
• Unit tests cover log creation, payload scrubbing, filtering, and immutability enforcement

[Nemenwa]

Hi maintainer, I have reviewed the task description and will like to work on this issue please. I can finsih in 6hours, THank you

[grantfox-oss]

🦊 GrantFox — @Nemenwa has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #80)
2. Your PR will be reviewed by the MindFlowInteractive maintainers

Good luck! Track your progress on GrantFox.