Audit log

Every tool call the gateway handled, newest first. Updates every 2 seconds. Requests rejected for a bad or missing token never reach a tool, so they do not appear here (the console shows them as REJECTED). Tokens and file contents are never recorded.