Hash-chained event proof.

API exports, prep packets, vault actions, and review decisions write append-only events to data/audit-ledger.ndjson.