Console activity

Every posture-changing event in one stream: triage decisions, connector configuration and probes, snapshot freezes, workflow runs, and trust-share lifecycle. All entries come from append-only logs in gold/.