A-META R2 fixes: AuditSink: Debug + datafusion-plan/dispatch features

- Added Send + Sync + Debug bound on AuditSink trait so MembraneRegistry
  can derive Debug under --all-features
- Added datafusion-plan and datafusion-dispatch feature aliases (no-op
  forward stubs gating audit_from_plan and parsed_query_to_plan helpers)

Author: claude

crates/lance-graph-callcenter/Cargo.toml

@@ -44,9 +44,16 @@ auth-rls = ["auth-jwt", "query"]
 auth     = ["auth-rls"]
 # LF-90 — append-only audit log skeleton (A3).
 audit-log = []
+# A-fix-audit forward-stub: enables `audit_from_plan(...)` helper that captures
+# rewritten DataFusion LogicalPlans into AuditEntry. No-op alias today; will
+# pull in `dep:datafusion` once the helper has a concrete consumer.
+datafusion-plan = ["query-lite"]
 # DM-8 — PostgREST stub uses a dependency-free hand-rolled JSON writer; the
 # feature flag turns the module on without dragging serde in.
 postgrest = []
+# A-fix-postgrest forward-stub: enables `parsed_query_to_plan(...)` ParsedQuery
+# → DataFusion LogicalPlan compiler. Wired in the follow-up dispatcher PR.
+datafusion-dispatch = ["query-lite"]
 # A4 plugin slots. Each is independently activatable; the `with_*` builder on
 # `MembraneRegistry` is gated on the slot feature plus the underlying module
 # feature (so e.g. enabling `membrane-plugins-rls` without an RLS feature is

crates/lance-graph-callcenter/src/audit.rs

@@ -67,7 +67,7 @@ pub enum StatementKind {
 
 /// Append-only sink. Default impl is in-memory ring buffer; production
 /// path swaps in a Lance-backed writer in a follow-up PR.
-pub trait AuditSink: Send + Sync {
+pub trait AuditSink: Send + Sync + std::fmt::Debug {
     fn append(&self, entry: AuditEntry);
     fn snapshot(&self) -> Vec<AuditEntry>;
 }