Audit Trail

Every read, merge, and decision is signed and hash-chained. Full DPDP audit console next sprint.