Customer impersonation + audit log UI

DirtFleet staff can view a customer org (red banner, mutations blocked). Tenant-side audit log at /settings/audit for org admins.