feat(mgmt): /api/audit/{query,export} endpoints with permission gates (#23 M8)

src/ScadaLink.Host/Program.cs

@@ -201,6 +201,10 @@ try
         app.MapCentralUI<ScadaLink.Host.Components.App>();
         app.MapInboundAPI();
         app.MapManagementAPI();
+        // Audit Log #23 (M8): CLI-facing /api/audit/{query,export} routes. Same
+        // Basic-Auth + LDAP mechanism as /management; gated on the OperationalAudit
+        // / AuditExport role sets.
+        app.MapAuditAPI();
         app.MapHub<ScadaLink.ManagementService.DebugStreamHub>("/hubs/debug-stream");
 
         // Compile and register all Inbound API method scripts at startup