User lifecycle audit

Tracks user-account changes:

• USER_ENABLED_CHANGED — a user was disabled or re-enabled.
• USER_GLOBAL_ROLE_CHANGED — a user's account role moved between Admin and User.
• USER_FULLNAME_CHANGED — an admin edited a user's name.
• USER_DELETED — a user was moved to Trash.
• USER_RESTORED — a user was restored from Trash.

Read access

These are account-level (global) actions, so they're recorded in the platform admin audit log and visible to global administrators — not in the project-scoped Membership audit.

Use cases

• "When was Bob downgraded from ADMIN to USER?"
• "Who disabled Alice's account?"
• "Who moved Carol to Trash, and was she ever restored?"

Retention

Audit rows are immutable and never deleted in v1.