fix: enforce public contrast and audit rank errors

src/lib/admin/authorization-events.ts

@@ -0,0 +1,9 @@
+import { logServerError } from "@/lib/server-log";
+import { logStaffActivity } from "@/lib/services/staff-activity";
+import { authorizationActivity, type AuthorizationEvent } from "@/lib/admin/authorization-event";
+
+export async function logAuthorizationEvent(event: AuthorizationEvent): Promise<void> {
+  const correlationId = `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+  await logStaffActivity({ ...authorizationActivity(event), description: `${authorizationActivity(event).description}; correlation=${correlationId}` });
+  if (event.error) logServerError(event.kind, event.error, { correlationId, userId: event.userId, rank: event.rank, permission: event.permission ?? null, source: event.source });
+}