Observability & audit

[geolunalg]

Overview

User Story:
As an admin/security team, I want authentication events logged so we can investigate issues.

Action Items

Acceptance Criteria:

• Log login success/failure, refresh success/failure, logout, token reuse detection.
• Logs avoid storing raw tokens or passwords.
• Metrics dashboards show rate of refresh failures and login attempts.

Resources/Instructions

• This issue is part of the epic: EPIC: Authentication & Session Management (JWT + Refresh) #2065

[geolunalg]

@JackHaeg @trillium @rteas

This is a nice to have or can be skipped. This is basically an audit of user authenticaion and or failures to authenticate.

Size: M to L

[JackHaeg]

Deprioritized for now