d630e2646b
The audit log drilldown drawer (and the execution-tree node-detail modal, which shares this component) now renders the SourceNode field directly under SourceSiteId so provenance reads 'site → node → instance → script' in declared order. Two focused tests pin the field's presence in both populated and null cases plus the inter-field ordering.