PruneAuditLogRequest

Operator-initiated retention prune. Clears entries strictly older than before_timestamp_ms; 0 (unset) clears everything. Front-prune only (the sanctioned mutation): the boundary is recorded as a checkpoint so the kept entries still verify, and a chained audit-pruned marker entry records that the prune happened.