Connection audit events

The audit log now records when team members connect a new agent and when a connection is revoked, including who acted and whether a revoke was self- or admin-initiated. Connected agent names appear in the event feed in violet, consistent with other AI-provenance metadata. A new "Connection" filter group lets admins narrow the log to agent lifecycle events.