Structured audit logging for privileged actions

                  AuditLog.create!(
  actor_id: current_user.id,
  action: 'member.approve',
  target_type: 'Member',
  target_id: member.id,
  ip_address: request.remote_ip,
  user_agent: request.user_agent,
  metadata: { previous_status: member.status, new_status: 'approved' },
)