Org admins need a customer-visible audit trail in the Hub showing who changed what, and when, for administrative and configuration actions in their organization.

Events to capture (at minimum):
- Connector create / update / delete (including credential changes)
- API key creation, rotation and revocation
- Access group changes (create/delete, membership added/removed, permissions changed)
- User invited / added / removed / role changed
- Organization and security setting changes (including changes to logging itself)

Each entry: actor (user ID/name), timestamp, action, target object, before/after where relevant, source IP. Filterable by user, object type, action and date range.

Today we log user events in our internal audit log, but customers cannot see them in the Hub. Requested by security/compliance reviews during Flow Connect conversions (Loram, Saab, Vantaan Energia).