[6b] Audit log admin viewer

[andrmaz]

What to build

Admin UI page that lists QueryLog entries with practical filters: time range, user, and department. Each log entry is expandable to show the full policy decision trace and the specific chunks/documents included in the Context Bundle. The viewer is read-only and suitable for governance review.

Acceptance criteria

• Admin page lists query log entries in reverse-chronological order.
• Filters by time range, user, and department work correctly.
• Each entry expands to show: actor, org, department, policy decision trace, and Context Bundle chunk/doc references.
• View is read-only — no mutation controls.
• Integration test verifies filter results match expected log entries.

Blocked by

• [6a] QueryLog write path — append-only audit records #16 [6a] QueryLog write path — append-only audit records