feat: audit log of admin writes, sign-ins and key creation, with an audit tab [CI]

backend/src/MoShiro.Backend.Application/Retention/RetentionService.cs

@@ -12,19 +12,21 @@ public sealed partial class RetentionService : BackgroundService
     private readonly IMetricStore _metrics;
     private readonly IEventStore _events;
     private readonly IAuthStore _auth;
+    private readonly AuditService _audit;
     private readonly IHostStore _hosts;
     private readonly SettingsService _settings;
     private readonly LoginRateLimiter _limiter;
     private readonly TimeProvider _time;
     private readonly ILogger<RetentionService> _logger;
 
-    public RetentionService(IRawStore raw, IMetricStore metrics, IEventStore events, IHostStore hosts, IAuthStore auth, SettingsService settings, LoginRateLimiter limiter, TimeProvider time, ILogger<RetentionService> logger)
+    public RetentionService(IRawStore raw, IMetricStore metrics, IEventStore events, IHostStore hosts, IAuthStore auth, AuditService audit, SettingsService settings, LoginRateLimiter limiter, TimeProvider time, ILogger<RetentionService> logger)
     {
         _raw = raw;
         _metrics = metrics;
         _events = events;
         _hosts = hosts;
         _auth = auth;
+        _audit = audit;
         _settings = settings;
         _limiter = limiter;
         _time = time;
@@ -69,6 +71,7 @@ public sealed partial class RetentionService : BackgroundService
         await _events.DeleteOlderThanAsync(nowMs - (await _settings.GetIntAsync(SettingsService.EventDays, ct) * Steps.Day), ct);
         await _hosts.DeleteOlderThanAsync(nowMs - (await _settings.GetIntAsync(SettingsService.HostDays, ct) * Steps.Day), ct);
         await _auth.DeleteExpiredSessionsAsync(nowMs, ct);
+        await _audit.PruneAsync(nowMs, ct);
         _limiter.Prune();
     }