Check audit log contents

While we put every request in the audit log, we should make sure all relevant commands done using the CLI end up in the audit log too.

~We should also probably remove all fetching of static resources from the audit log as they serve no value.~ (done already)

No files, tests, or specific commands are identified. Start by tracing the CLI command entry points and audit-log implementation; done means every relevant CLI command appears in the audit log, while static-resource fetching remains excluded as noted.

Written by the indexing model from the issue text.