Platform administration
Uses `/api/v1/platform/audit-events/`. Tenant roles never grant platform audit access.