docs(doc-1415): warn that AccessPoint bypasses platform audit logging

When AccessPoint is enabled, requests reach the tenant cluster directly
and are not captured by platform audit logs. Add a note to ingress-access
with a cross-link to tenant cluster audit logging as the alternative.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: djwfyi

vcluster/key-features/ingress-access.mdx

@@ -24,6 +24,10 @@ Enabling `AccessPoint` on a virtual cluster requires that the host cluster has a
 controller deployed, and the `Cluster` object has the `loft.sh/ingress-suffix` annotation set
 with a valid domain.
 
+:::note Platform audit logging does not cover direct access
+When `AccessPoint` is enabled, requests reach the tenant cluster directly and bypass the platform gateway. These requests are not captured by [platform audit logging](/docs/platform/configure/platform-configs/audit). To audit direct access, configure [tenant cluster audit logging](../manage/logging.mdx#audit-logs) separately.
+:::
+
 The hostname used to access a virtual cluster that has the `AccessPoint` feature enabled, will
 be of the following format: