Log security and audit events

## Description
Persist security-sensitive events for auditing and monitoring,
including authentication failures and admin actions.

## Events Covered
- AUTH_FAILURE
- ADMIN_ACTION
- RATE_LIMIT
- SECURITY_EVENT

## Acceptance Criteria
- SECURITY log level supported
- Actor context (user_id, role, IP) recorded
- Logs suitable for compliance and audits