feat: add entity verification and migrate audit logs to actor model (CM-966)

[skwowet]

Summary

This PR introduces entity verification metadata and migrates audit logging to a generic actor model. It prepares the platform for cross-product usage (e.g. LFX One) and clearer provenance of data.

What changed

• Migrated audit logging from userId to actorId/actorType in auditLogAction, including backfill and index updates.
• Removed legacy audit log implementation and dead paths (auditLogs table usage, old repository/model/API hooks, and old cleanup job path).
• Added verification metadata where needed:
  • memberIdentities: source, verifiedBy
  • organizationIdentities: source
  • memberOrganizations: verified, verifiedBy
• Standardized identity creation flow so source is passed from callers (ui, integration, enrichment) and carried through backend/services/workers.
• Refactored DAL identity modules and imports to remove duplicate/old implementations and use the consolidated paths.
• Preserved source behavior during merge/unmerge flows, including legacy-safe handling in backup/restore paths.

---

Note

High Risk
Includes a breaking DB migration (drops auditLogs, removes userId from auditLogAction) and broad cross-service type/contract changes (audit log shape and identity creation payloads), so mismatches can cause runtime errors or missing audit/provenance data.

Overview
Audit logs are migrated to an actor model. The DB migration adds actorId/actorType to auditLogAction (backfills from userId, enforces NOT NULL, indexes actorId), updates DAL query/insert paths to use actor fields and return an actor object, and updates the UI/filters from User to Actor (including service actors) while removing the legacy /audit-log endpoint and dropping the unused auditLogs table.

Identity provenance + verification metadata is standardized end-to-end. New source/verifiedBy (and work-experience verified/verifiedBy) columns are introduced, member/org identity creation flows now pass and persist source (e.g. ui, integration, enrichment) across backend services, workers, OpenSearch seed data, and types; the DAL member identity module is consolidated (removing member_identities), and a large set of repositories stop writing legacy audit-log records via the removed AuditLogRepository/model/cleanup job path.

^{Written by Cursor Bugbot for commit 8233574. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.