Audit chain integrity

Each stage maintains a hash-linked audit chain. Each event hash is computed over the canonical JSON of (seq, event_type, actor, target, payload, prev_hash, timestamp).

Re-hashing on read verifies integrity. Public read-only access to the chain is available at /audit-lineage.