feat: add audit log viewing for vendor and tenant personas

Vendor sees all audit events with tenant filter at /vendor/audit.
Tenant admin sees only their own events at /tenant/audit.
Both support pagination, action/result filters, and text search.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ui/src/router.tsx

@@ -11,11 +11,13 @@ import { useOrgStore } from './auth/useOrganization';
 import { VendorTenantsPage } from './pages/vendor/VendorTenantsPage';
 import { CreateTenantPage } from './pages/vendor/CreateTenantPage';
 import { TenantDetailPage } from './pages/vendor/TenantDetailPage';
+import { VendorAuditPage } from './pages/vendor/VendorAuditPage';
 import { TenantDashboardPage } from './pages/tenant/TenantDashboardPage';
 import { TenantLicensePage } from './pages/tenant/TenantLicensePage';
 import { OidcConfigPage } from './pages/tenant/OidcConfigPage';
 import { TeamPage } from './pages/tenant/TeamPage';
 import { SettingsPage } from './pages/tenant/SettingsPage';
+import { TenantAuditPage } from './pages/tenant/TenantAuditPage';
 
 function LandingRedirect() {
   const scopes = useScopes();
@@ -66,12 +68,18 @@ export function AppRouter() {
                 <TenantDetailPage />
               </RequireScope>
             } />
+            <Route path="/vendor/audit" element={
+              <RequireScope scope="platform:admin" fallback={<Navigate to="/tenant" replace />}>
+                <VendorAuditPage />
+              </RequireScope>
+            } />
 
             {/* Tenant portal */}
             <Route path="/tenant" element={<TenantDashboardPage />} />
             <Route path="/tenant/license" element={<TenantLicensePage />} />
             <Route path="/tenant/oidc" element={<OidcConfigPage />} />
             <Route path="/tenant/team" element={<TeamPage />} />
+            <Route path="/tenant/audit" element={<TenantAuditPage />} />
             <Route path="/tenant/settings" element={<SettingsPage />} />
 
             {/* Default redirect — vendor goes to /vendor/tenants, customer to /tenant */}