Read privileged operation admission audit

Available through the REST API and hosted MCP. Read scope is required. Only this account's events are returned; resource-confined credentials only see permitted service/deployment events. Identifiers, plan digest, approval, request/start/return timestamps and bounded outcomes only. No environment, secrets, command output, file content or caller IPs. Acceptance does not certify completion on the host. Root/database compromise can alter the trail. Fixed retention: operational 7 days, security 30, destructive 90, refusal 7; daily pruning by class.