feat: add audit events and runtime state snapshots to database

- Introduced new tables for audit events and runtime state snapshots in the database schema.
- Created data classes for AuditRecord and RuntimeStateRecord to represent the new entities.
- Implemented AuditRepository and RuntimeStateRepository for inserting and retrieving records.
- Enhanced the dashboard to include an audit trail section, displaying recent audit events.
- Added tests for the new audit repository and runtime lifecycle functionalities.
- Updated settings validation to ensure proper configuration for alerting features.
- Integrated alert notifications across various components, including execution sequencer and loss limits.

.gitea/workflows/ci.yml

@@ -23,6 +23,7 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install -e .[dev]
+          pip install pip-audit
 
       - name: Ruff
         run: ruff check .
@@ -33,6 +34,12 @@ jobs:
       - name: MyPy
         run: mypy src
 
+      - name: Dependency audit
+        run: pip-audit --skip-editable
+
+      - name: Secret scan (worktree + git history)
+        run: python scripts/security_scan.py
+
       - name: Tests
         run: pytest -q