fix(audit): harden audit log with summary fixes, design compliance, and test coverage (#561)

* fix(audit): harden audit log with summary fixes, design compliance, and test coverage

Replace stale /compose/* route summaries with current /stacks/* patterns,
add ~30 missing route summaries for container ops, labels, fleet updates,
SSO, templates, and auto-update. Fix X-Forwarded-For extracting full
proxy chain instead of first client IP. Pre-sort pattern table at module
load for O(1) lookup instead of sorting per request.

Add Calendar and DatePicker UI components (react-day-picker v9 + date-fns)
replacing browser-native date inputs. Align AuditLogView with design system:
Combobox instead of Select, design token colors, strokeWidth 1.5, card bevel,
tabular-nums on all numeric cells.

Add diagnostic logging gated behind developer mode for audit middleware,
query, and export endpoints. Extract getAuditSummary to testable utility.
Add 32 tests covering summary resolution, DB round-trips, API permissions,
export formats, and middleware integration.

* fix(audit): use correct Chevron prop types for react-day-picker compatibility

docs/features/audit-log.mdx

@@ -33,17 +33,29 @@ Expanding a row reveals additional detail:
 
 ### Example actions tracked
 
-- Stack lifecycle: deploy, stop, start, restart, pull, delete
-- Stack creation and file edits
+- Stack lifecycle: deploy, stop, start, restart, update, rollback, delete
+- Stack creation, file edits, and env file changes
+- Container operations: start, stop, restart
 - Node management: add, update, delete
-- User management: create, delete, role changes
+- User management: create, delete, role assignment and removal
+- Password changes and node token generation
 - Settings changes
-- System prune operations
+- System prune operations (general, orphans, system)
+- Image, volume, and network deletion
+- Network creation
 - License activation/deactivation
 - Webhook and notification agent configuration
+- Notification route management and testing
 - Fleet backup creation, restoration, and deletion
+- Fleet node updates (individual and fleet-wide)
 - Scheduled task management
 - Registry credential management
+- SSO configuration changes and connection tests
+- API token creation and revocation
+- Label management and bulk actions
+- Template deployments
+- Auto-update execution
+- Console token generation
 
 ## Viewing the audit log