feat: Admin audit-log viewer with filters and export

[dotunv]

Overview

Add an admin audit-log viewer that surfaces all security- and money-related actions (login, KYC changes, refunds, dispute resolutions, permission changes) with filters and export.

Motivation

Compliance and incident response require a searchable record of who did what and when, especially for money-moving and security-sensitive actions. Currently audit events may be logged, but there's no admin-facing viewer or filterable export to review them.

Proposed Design

1. Normalize audit logging behind an audit service that records: actor, action, resource_type, resource_id, ip, user_agent, metadata (JSON), created_at
2. Ensure key actions write audit records: authentication (login/logout/failed), KYC submissions and status changes, refunds, dispute resolutions, admin permission changes, campaign status changes, wallet/key events
3. Add admin endpoints: GET /api/admin/audit-logs with filters (actor, action, resource_type, date range) and pagination
4. Add CSV/JSON export of filtered audit results
5. Make audit records append-only (no update/delete) to preserve integrity
6. Add an admin UI page with the filters, a results table, and the export button

Acceptance Criteria

• Audit records are written for all listed security/money actions
• Audit records are append-only and not modifiable
• Admin can filter by actor, action, resource_type, and date range
• Results are paginated
• Admin can export filtered results to CSV and JSON
• Audit log viewer is restricted to admin role only
• Sensitive fields (passwords, secrets) are never stored in audit metadata
• Tests cover: audit writing for each action, filtering, pagination, export, admin-only access, append-only enforcement

[Ishola001]

@Ishola001 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello Maintainer. I can quickly work on this issue now. Kindly assign it to me.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Ishola001 to this issue.

[Netty-kun]

@Netty-kun has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi maintainer, I have read and understood the issue requirements and checked the necessary documentation. I’m confident I can work on this task effectively and deliver a proper solution.
Happy to discuss the approach first if that's useful before I start.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Netty-kun to this issue.

[Meemlahsabi]

@Meemlahsabi has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I can take ownership of this issue and work through it with attention to the existing patterns and edge cases. Ready to begin.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Meemlahsabi to this issue.

[somotochukwu-dev]

@somotochukwu-dev has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi
Please assign this issue to me
Thanks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @somotochukwu-dev to this issue.

[mysteriousskater]

@mysteriousskater has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello maintainer, I’d like to claim this issue and will submit a PR once finished

ℹ️ Repo Maintainers: To accept this application, review their application or assign @mysteriousskater to this issue.

[drips-wave]

Congratulations, @somotochukwu-dev! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @somotochukwu-dev: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊